replace deploy token with a proper jwt implementation

[shini4i]

We will need to support both old and new setups for some time, as it will be quite hard to change all projects in one go.

This will potentially allow us to restrict which projects can be updated with the specific token.