Bug 1824931 - clean up old hg branches permissions in chain-of-trust verification (#599)

pine and oak no longer need nightly-signing, and the mozilla-inbound and
fx-team integration repos are defunct.

Author: jcristau

src/scriptworker/constants.py

@@ -206,9 +206,8 @@
                                 "netlocs": ("hg.mozilla.org",),
                                 "path_regexes": (
                                     r"^(?P<path>/mozilla-(central|unified))(/|$)",
-                                    r"^(?P<path>/integration/(autoland|fx-team|mozilla-inbound))(/|$)",
+                                    r"^(?P<path>/integration/autoland)(/|$)",
                                     r"^(?P<path>/releases/mozilla-(beta|release|esr\d+))(/|$)",
-                                    r"^(?P<path>/projects/(oak|pine|pine-stable))(/|$)",
                                 ),
                             }
                         ),
@@ -432,18 +431,12 @@
                             "esr": ("/releases/mozilla-esr102",),
                             "nightly": ("/mozilla-central",),
                             # Which repos can do nightly signing?
-                            # XXX remove /projects/oak when we no longer test updates against it
-                            # XXX remove /projects/pine when we no longer need
-                            #     nightly signing
                             "all-nightly-branches": (
                                 "/mozilla-central",
                                 "/releases/mozilla-unified",
                                 "/releases/mozilla-beta",
                                 "/releases/mozilla-release",
                                 "/releases/mozilla-esr102",
-                                "/projects/oak",
-                                "/projects/pine",
-                                "/projects/pine-stable",
                             ),
                             "all-production-branches": (
                                 "/mozilla-central",