Token scope enforced

Leverage expanded /job payload (see: https://docs.gitlab.com/ee/api/jobs.html#get-job-tokens-job) in upcoming release.

This will need cherry picked and included in the patch_0121 branch.