Correct ref_protected requirement in trust policy (#9825)

* Revert incorrect change to jmxfetch workflow

* Make correct change to system tests workflow

Author: sarahchen6

.github/chainguard/self.update-jmxfetch-submodule.create-pr.sts.yaml

@@ -5,6 +5,7 @@ subject: repo:DataDog/dd-trace-java:ref:refs/heads/master
 claim_pattern:
   event_name: (schedule|workflow_dispatch)
   ref: refs/heads/master
+  ref_protected: "true"
   job_workflow_ref: DataDog/dd-trace-java/\.github/workflows/update-jmxfetch-submodule\.yaml@refs/heads/master
 
 permissions:

.github/chainguard/self.update-system-tests.push.sts.yaml

@@ -5,7 +5,6 @@ subject_pattern: repo:DataDog/dd-trace-java:ref:refs/(heads/master|tags/v[0-9]+.
 claim_pattern:
   event_name: (push|workflow_dispatch)
   ref: refs/(heads/master|tags/v[0-9]+\.[0-9]+\.0)
-  ref_protected: "true"
   job_workflow_ref: DataDog/dd-trace-java/\.github/workflows/create-release-branch\.yaml@refs/heads/master
 
 permissions: