Geo: Enforce repository JWT scopes

It was already implemented but we reverted it in https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/9597

We have to bring it back in 11.10.