Re-implement ability to run Duo Workflows in CI

This is the first step in the Iteration Plan added in gitlab-com/content-sites/handbook!10875 (closed) . It is started already in !176742 (merged) .

Tag @joernchen for a security review once it is in a reviewable state.