Add prefix to ApplicationSetting token fields

Three tokens are generated in application_settings.rb. As defense in depth we should add a static prefix to these, to enable easier detection if an admin / user accidentally leaks the secrets.

app/models/application_setting.rb:41:3: C: Gitlab/TokenWithoutPrefix: Tokens should be prefixed. See doc/development/secure_coding_guidelines.md#token-prefixes for more information.
  add_authentication_token_field :static_objects_external_storage_auth_token, encrypted: :required
  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
app/models/application_setting.rb:42:3: C: Gitlab/TokenWithoutPrefix: Tokens should be prefixed. See doc/development/secure_coding_guidelines.md#token-prefixes for more information.
  add_authentication_token_field :error_tracking_access_token, encrypted: :required
  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Relevant:

While this is assigned to groupstatic analysis as per https://handbook.gitlab.com/handbook/product/categories/#shared-responsibility-functionality, there is no commitment to work on this. Also, this is not a vulnerability.

Edited by Nick Malcolm