Handle expiring project and group token somehow
We had some expiring access tokens recently (archlinux-docker and arch-boxes) and they will expire in under a year again. If we could rotate (or extend) them before they expire, that would be ideal.
GitLab 17.2 added some functionality which may be useful for this: https://about.gitlab.com/releases/2024/07/18/gitlab-17-2-released/#identify-dates-when-multiple-access-tokens-expire.