lifecycle/sts-policy: add new sts policy for automation to read packa…

…ge configs (#35532)

Signed-off-by: James Rawlings <[email protected]>

.github/chainguard/lifecycle-cve-dashboard-gen-ai-remediation.sts.yaml

@@ -0,0 +1,8 @@
+issuer: https://accounts.google.com
+
+# have more than one service account
+# lc-cve-dashboard-bot@staging-enforce-cd1e.iam.gserviceaccount.com
+subject_pattern: "(107513915972546566458)"
+
+permissions:
+  contents: read