Draft: gitlab: Add ruby script for continuous rotation of bot tokens

Kristian Klausenrequested to merge
klausenbusk/infrastructure:gitlab-bot-token-rotator into master

This adds a small ruby script which will iterate over all CI/CD variables in the archlinux namespace* and if it finds a gitlab token (i.e. starts with glpat-) it will "rotate" it.

To avoid breaking any running CI/CD jobs, the existing token is not revoked instantly but set to expire in two days. In the meantime a new token is created and the CI/CD variable updated.

* projects under "archlinux/packaging/packages/" are excluded

Merge request reports