Per-build gitlab-ci-token

Currently to clone project sources we use static project token generated when project is added to CI. With CI to CE merge we should switch to token generated per-build and accessible only when builds that are running. This will greatly enhance git clone.

/cc @sytses