Handle expiring project and group token somehow

They expire after 12 months and we are (usually) not noticing it before.

Can we perhaps auto-extend them? https://docs.gitlab.com/ee/security/tokens/token_troubleshooting.html#extend-token-lifetime