downgrade nextcloud and gitlab accesses

Those are not absolutely mandatory for TPA: they are service-admin
level stuff.

howto/new-person.md

@@ -137,8 +137,6 @@ Other accounts required for full TPA access:
  2. [ ] [puppet](howto/puppet#adding-removing-a-global-admin) git repository access
  3. [ ] TPA password manager access (`admin/tor-passwords.git` in gitolite)
  4. [ ] Sunet cloud access (e.g. `Message-ID: <87bm1gb5wk.fsf@nordberg.se>`)
- 5. [ ] [Nextcloud](https://nc.torproject.net) admin account
- 6. [ ] GitLab `-admin` account
 
 Extra services we are not directly responsible for, but that TPA
 staff may administer at some point. Those are given as needed:
@@ -147,7 +145,9 @@ staff may administer at some point. Those are given as needed:
  2. [ ] [RT](howto/rt#new-rt-admin)
  3. [ ] [blog](service/blog)
  4. [ ] [btcpayserver](service/BTCpayserver)
+ 6. [ ] GitLab `-admin` account
  5. [ ] [gitolite admin](howto/git)
+ 5. [ ] [Nextcloud](https://nc.torproject.net) admin account
  6. [ ] [schleuder](service/schleuder)
  7. [ ] [torproject github account](https://github.com/torproject)