This implements the internal api side of things to support the feature
requested in gitlab-org/gitlab#19672

The actual user-facing command in gitlab-shell for obtaining tokens is
being implemented but this endpoint is its hard dependency and must be
merged first.