Split Puppet project ACLs between namespaces

There are a couple of projects managed by the Puppet OpenStack team
outside the openstack/ namespace. In order to not have these inherit
from openstack/meta-config, give them a separate copy of their
shared ACL config.

Change-Id: I9dc7cd75d83892c1a3f83ecb9a476b79c1cbb1a9

gerrit/acls/x/puppet-modules.config

@@ -0,0 +1,11 @@
+[access "refs/heads/*"]
+abandon = group puppet-manager-core
+label-Code-Review = -2..+2 group puppet-manager-core
+label-Workflow = -1..+1 group puppet-manager-core
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true

gerrit/projects.yaml

@@ -7726,7 +7726,7 @@
   description: Puppet Module for MidoNet project
 - project: x/puppet-modulesync-configs
   description: Modulesync configuration for OpenStack puppet modules
-  acl-config: /home/gerrit2/acls/openstack/puppet-modules.config
+  acl-config: /home/gerrit2/acls/x/puppet-modules.config
 - project: x/puppet-n1k-vsm
   description: Foreman Puppet installer for Cisco N1KV Virtual Supervisor Module
 - project: x/puppet-openstack-release-tools
@@ -7740,7 +7740,7 @@
   acl-config: /home/gerrit2/acls/x/surveil.config
 - project: x/puppet-tuskar
   description: OpenStack Tuskar Puppet Module
-  acl-config: /home/gerrit2/acls/openstack/puppet-modules.config
+  acl-config: /home/gerrit2/acls/x/puppet-modules.config
 - project: x/pyghmi
   description: A Pure python IPMI library
 - project: x/python-almanachclient