Add pypa tenant

This is a tenant for running 3rd-party CI against the pypa projects on
Github, particularly pip.

Change-Id: Iaf8a4dac561440cc3337b00a738979db60b014ce

zuul/main.yaml

@@ -1665,3 +1665,26 @@
       github:
         untrusted-projects:
           - pyca/cryptography
+
+# 3rd party CI for Python Packaging Authority
+# https://github.com/pypa
+- tenant:
+    name: pypa
+    max-nodes-per-job: 1
+    report-build-page: true
+    source:
+      gerrit:
+        config-projects:
+          - pypa/project-config
+          # Only use jobs and secrets from this repo, we do not want
+          # the project definition.
+          - opendev/base-jobs:
+              include:
+                - job
+                - secret
+                - nodeset
+        untrusted-projects:
+          - zuul/zuul-jobs
+      github:
+        untrusted-projects:
+          - pypa/pip