Authorize `CI_JOB_TOKEN` for any api route on /`CI_PROJECT_ID`/

Cannot authenticate using $CI_JOB_TOKEN

I'm trying to automate the release process upon merging to master in CI/CD using the tag, release, and upload api endpoints. However, it requires a personal access token which is unmasked on occasion.

Proposal

Allow $CI_JOB_TOKEN to authenticate against all /api/v4/projects/$CI_PROJECT_ID/... endpoints

Links / references

Issue concerning unmasking of "secret variables" #13784 (closed)