Draft: implement token renewal procedures

This new job attempts to renew the provided token by talking to the token rotation API to get a new value for a token, then storing this in the project's CI/CD variables through that API as well.

This is to work around enforced token expiry recently deployed in GitLab, see this blog post which explains that, starting in GitLab 16.0, all tokens automatically expire after one year. An exception is the (non-free) service accounts feature which have optional expiration exceptions.

Closes: team#41510