Configure dynamic replication controls

Add new groups for configuring what repos can replicate.

Granting refs/* read to the new GitHub Repliction
accounts will enable the replication plugin to see the
repo and start replicating it to the appropriate GitHub
org.

Signed-off-by: Andrew Grimberg <agrimberg@linuxfoundation.org>
diff --git a/groups b/groups
index 362fdc2..6350554 100644
--- a/groups
+++ b/groups
@@ -1,10 +1,12 @@
 # UUID                                  	Group Name
 #
+2a10ec5934b3fecac3781fe7d5dedc172e21d459	GitHub Replication - OpenCord
 4f32b523380e68c8595bdf27a006c697ea17bade	Non-Interactive Users
 61317511a4a11254cbbf9612896412663548965a	Administrators
 63e77955f1e6a49cb3169e4d3ec0a9fd30380c11	Read-only Users
 7177c81018e69d9a1b1f6f940aad91fbbba574d1	CORD Committers
 9a1085ebc62ecb78f5b25e928a96a84655b4d565	ONF CLA Accepted
+ea0401fd666860cbc94b2132ff9d30a0e10d60e9	GitHub Replication - Open-Cloud
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users
diff --git a/project.config b/project.config
index 5e4e16a..f9e5d16 100644
--- a/project.config
+++ b/project.config
@@ -15,6 +15,8 @@
 	createProject = group CORD Committers
 	accessDatabase = group user/Brian O'Connor (bocon)
 [access "refs/*"]
+	read = deny group GitHub Replication - Open-Cloud
+	read = deny group GitHub Replication - OpenCord
 	read = group Administrators
 	read = group Anonymous Users
 	read = group Non-Interactive Users