Grant Create Annotated Tag perms on bindep

We're testing a potential workaround for a suspected regression in
Gerrit 3.4, where signed tags are rejected with the error "You need
'Create Tag' rights to push a normal tag." Temporarily grant this
for the opendev/bindep project, so we can see if it works around the
problem while we coordinate a fix with Gerrit upstream.

Change-Id: Iad8c1f83e247c9a8bcf5b4f530f7b83663e1f793

gerrit/acls/opendev/bindep.config

@@ -5,6 +5,7 @@ label-Workflow = -1..+1 group bindep-core
 
 [access "refs/tags/*"]
 createSignedTag = group bindep-release
+createTag = group bindep-release
 
 [receive]
 requireChangeId = true

tools/normalize_acl.py

@@ -65,6 +65,7 @@ valid_keys = {'abandon',
               'copyMinScore',
               'create',
               'createSignedTag',
+              'createTag',
               'defaultValue',
               'delete',
               'editHashtags',