Add submit-requirement blocking changes labeled not submittable

To mechanically enforce the intent of the commit message.

Change-Id: I3e51f1d01b00828b50875a462b97b5e6a918a173
Reviewed-on: https://boringssl-review.googlesource.com/c/All-Projects/+/95507
Reviewed-by: David Benjamin <davidben@google.com>
diff --git a/project.config b/project.config
index fbea9d0..8b065b0 100644
--- a/project.config
+++ b/project.config
@@ -197,3 +197,8 @@
 	submittableIf = -has:unresolved
 	overrideIf = message:\"^.*Unresolved-Comment-Reason:.*\"
 	canOverrideInChildProjects = false
+[submit-requirement "No-Do-Not-Submit"]
+	description = Block submission of changes containing 'DO NOT SUBMIT'
+	applicableIf = message:\"^.*(D|d)(O|o) (N|n)(O|o)(T|t) (S|s)(U|u)(B|b)(M|m)(I|i)(T|t).*\"
+	submittableIf = is:false
+	canOverrideInChildProjects = false