Add pyca 3rd-party CI tenant
Add pyca 3rd-party CI tenant

This is a separate tenant for pyca 3rd party CI testing/wheel
building/etc.  pyca want to keep their configuration in their project,
but are not gated by Zuul.  This opens a small window for job name
conflicts or other config errors that may affect more than just the
project making the mistake.  Keeping things in a separate tenant means
our main projects will not be affected.

It also gives us a place to have a separate trusted repository so we
have a home for things like uploading with API keys should we need to.

Change-Id: I99759f107aaa99e87ddbe83eea462ff725d949ee

openstack-infra/project-config,openstack-infra/project-config