[Cherry pick] add repository read permission to limitedGuest

[tpoxa]

Issue being fixed

Fixes #19709

Related to PR #19757

Please indicate you've done the following:

• Well Written Title and Summary of the PR
• Label the PR as needed. "release-note/ignore-for-release, release-note/new-feature, release-note/update, release-note/enhancement, release-note/community, release-note/breaking-change, release-note/docs, release-note/infra, release-note/deprecation"
• Accepted the DCO. Commits without the DCO will delay acceptance.
• Made sure tests are passing and test coverage is added if needed.
• Considered the docs impact and opened a new docs issue or PR with docs changes if needed in website repository.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (b622d4a) 67.42% compared to head (83635da) 70.60%.
Report is 2 commits behind head on release-2.9.0.

Additional details and impacted files

@@                Coverage Diff                @@
##           release-2.9.0   #19815      +/-   ##
=================================================
+ Coverage          67.42%   70.60%   +3.18%     
=================================================
  Files                993      749     -244     
  Lines             108932    95516   -13416     
  Branches            2752        0    -2752     
=================================================
- Hits               73444    67442    -6002     
+ Misses             31534    24425    -7109     
+ Partials            3954     3649     -305     

Flag	Coverage Δ
unittests	70.60% <ø> (+3.18%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files	Coverage Δ
src/common/rbac/project/rbac_role.go	70.00% <ø> (ø)

... and 247 files with indirect coverage changes