Add repo-ci-cd-admin version and update relevant docs (#57803)

Co-authored-by: Ben Ahmady <32935794+subatoi@users.noreply.github.com>

Author: thyeggman

content/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/repository-roles-for-an-organization.md

@@ -99,17 +99,15 @@ Some of the features listed below are limited to organizations using {% data var
 | {% ifversion fpt or ghec %} |
 | Create, edit, run, re-run, and cancel [GitHub Actions workflows](/actions) | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> |
 | {% endif %} |
-| {% ifversion fpt or ghec %} |
+| {% ifversion repo-ci-cd-admin %} |
 | Create, update, and delete [GitHub Actions secrets](/actions/security-guides/using-secrets-in-github-actions) on GitHub.com | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> |
-| {% endif %} |
-| {% ifversion ghes %} |
+| {% else %} |
 | Create, update, and delete [GitHub Actions secrets](/actions/security-guides/using-secrets-in-github-actions) on GitHub.com | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> |
 | {% endif %} |
 | Create, update, and delete [GitHub Actions secrets](/rest/actions/secrets) using the REST API | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> |
-| {% ifversion fpt or ghec %} |
+| {% ifversion repo-ci-cd-admin %} |
 | Create, update, and delete [GitHub Actions variables](/actions/how-tos/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables) on GitHub.com | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> |
-| {% endif %} |
-| {% ifversion ghes %} |
+| {% else %} |
 | Create, update, and delete [GitHub Actions variables](/actions/how-tos/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables) on GitHub.com | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> |
 | {% endif %} |
 | Create, update, and delete [GitHub Actions variables](/rest/actions/variables) using the REST API | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-x" aria-label="No">✗</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> | <span role="img" class="octicon-bg-check" aria-label="Yes">✓</span> |

data/features/repo-ci-cd-admin.yml

@@ -0,0 +1,5 @@
+# Versioning for repo/org/enterprise policy settings for actions blocklist and SHA pinning policies.
+versions:
+  fpt: '*'
+  ghec: '*'
+  ghes: '>=3.19'

data/reusables/actions/permissions-statement-secrets-variables-repository.md

@@ -1 +1 @@
-To create secrets or variables on {% data variables.product.prodname_dotcom %} for a personal account repository, you must be the repository owner. To create secrets or variables on {% data variables.product.prodname_dotcom %} for an organization repository, you must have {% ifversion ghec %} `write` {% endif %}{% ifversion fpt or ghes %} `admin` {% endif %} access. Lastly, to create secrets or variables for a personal account repository or an organization repository through the REST API, you must have collaborator access.
+{% ifversion repo-ci-cd-admin %}To create secrets or variables on {% data variables.product.prodname_dotcom %} for an organization repository, you must have `write` access.{% else %}To create secrets or variables on {% data variables.product.prodname_dotcom %} for an organization repository, you must have `admin` access.{% endif %} For a personal account repository, you must be the repository owner to create secrets or variable in the web UI or a repository collaborator to create secrets or variables through the REST API.