Add docs about how to rotate the project tokens

After a recent security issue, we had to rotate the project tokens. This is something we need to document so that anyone can do it in the future.