Adjust CoT verification for new action and cron roles

[ahal]

No description provided.

[ahal]

I somewhat tested this here:
https://treeherder.mozilla.org/jobs?repo=try&revision=aa42e4ef18696cfd45a3b8c7884e97f28884e716

Which is using this PR. In this case the associated fxci-config PR hasn't landed yet, so the CoT error is exactly as expected:

2026-08-21T18:28:13 CRITICAL - scriptworker:parent IPph5MjSTdKbKc6rHdesQw: the runtime task doesn't match any rebuilt definition!
["[('change',\n"
" ['scopes', 0],\n"
" ('assume:repo:hg.mozilla.org/try:action-1:generic',\n"
" 'assume:repo:hg.mozilla.org/try:action:generic'))]"]
2026-08-21T18:28:13 CRITICAL - Chain of Trust verification error!

[ahal]

The failures are in test_production.py which hits live config. Not something I can fix in this PR, we'll need to co-ordinate this with the fxci-config PR.