Project-to-Project Tokens (For Artifacts)

Description

I have seen other similar requests that there should be easy access to artifacts from other projects as dependencies. I also believe this should be taken care of but with its own token. Right now we have tokens for pulls from a user, and a runner but we should also have a project-to-project token that is not tied to an account, and not tied to a runner, but tied to the project itself. That way we can have a project request access via a token and have the other project accept this request and only use this token for artifacts. Right now these the tokens we have access to give us too much visibility into the project, we do not need to have this token grab src code, only artifacts. This is desperately needed in my secure corporate setting, right now we are making pseudo accounts to use user tokens to grab these artifacts which is too much overhead security wise. This feature shouldn't be a difficult one to implement just one more channel of authentication.

Thank you