👷 [RUM-11361] Add octo policies (#3787)

Author: amortemousque

.github/chainguard/self.gitlab.pull_request.sts.yaml

@@ -0,0 +1,11 @@
+issuer: https://gitlab.ddbuild.io
+
+subject_pattern: 'project_path:DataDog/browser-sdk:refs/heads/main'
+
+claim_pattern:
+  project_path: 'DataDog/browser-sdk'
+  ref: 'main'
+  ref_path: 'refs/heads/main'
+
+permissions:
+  pull_requests: write

.github/chainguard/self.gitlab.read.sts.yaml

@@ -0,0 +1,9 @@
+issuer: https://gitlab.ddbuild.io
+
+subject_pattern: 'project_path:DataDog/browser-sdk'
+
+claim_pattern:
+  project_path: 'DataDog/browser-sdk'
+
+permissions:
+  contents: read

.github/chainguard/self.gitlab.release.sts.yaml

@@ -0,0 +1,10 @@
+issuer: https://gitlab.ddbuild.io
+
+subject_pattern: 'project_path:DataDog/browser-sdk:ref_type:tag'
+
+claim_pattern:
+  project_path: 'DataDog/browser-sdk'
+  ref_type: 'tag'
+
+permissions:
+  contents: write