Add "Manage Project Access Tokens" as a customizable permission

Background

Today, only Maintainers can manage project access tokens. This, along with other permissions, make the maintainer role have too much privilege, when Developer may not have enough.

Proposal

Add "Manage Project Access" tokens as a customizable permissions, so that it can be added onto any base role.