The permissions for the registration token
weren't consistent with every other permissions
related to the runner. It's now required to be
a group owner instead of maintainer.

Changelog: changed