configure-projects: default registry access to allowed

This effectively undoes 1486add7.

I think doesn't have any direct effect on users, but would if the container registry was enabled for the instance, since projects have it enabled by default.

This MR reflects the latest version of the script run against the production instance. I wanted to make sure this was in shape before we schedule it to run routinely.

Bug: T307537