Configure SignCLA integration.

See: go/gob/team/signcla

groups

diff --git a/groups b/groups
index 10359bf..566c58b 100644
--- a/groups
+++ b/groups
@@ -3,6 +3,7 @@
 global:Anonymous-Users                                  	Anonymous Users
 global:Project-Owners                                   	Project Owners
 global:Registered-Users                                 	Registered Users
+google:AI2Pq9r_ksT_hfUOny8swsG8krQwPL5eOM0hGHf4QWGOPdy9igqsdhs  google/google-union:signcla
 mdb:apphosting-stubby-api--s-7egoogle-2ecom-3agitwatcher	mdb/apphosting-stubby-api--s-7egoogle-2ecom-3agitwatcher
 mdb:hafnium-access                                      	mdb/hafnium-access
 mdb:hafnium-admin                                       	mdb/hafnium-admin

project.config

diff --git a/project.config b/project.config
index a939406..a46bdaf 100644
--- a/project.config
+++ b/project.config
@@ -1,10 +1,16 @@
 [project]
 	description = Access inherited by all other projects.
 [receive]
-	requireContributorAgreement = false
+	requireContributorAgreement = true
 	requireSignedOffBy = false
 	requireChangeId = true
 	enableSignedPush = false
+[accounts]
+	sameGroupVisibility = deny group google/google-union:signcla
+[contributor-agreement "Google CLA"]
+	description = Google Contributor License Agreement
+	agreementUrl = static/cla.html
+	accepted = group google/google-union:signcla
 [submit]
 	mergeContent = false
 	action = rebase if necessary