Notify GitLab user when PAT is rotated

Proposal

When using the Personal Access Token API, rotation happens silently, even if it implies that a token is created and another is revoked.

I think an email notification should be sent to the owner, as what is done when a PAT is created or revoked.

see also #337591 (closed) and #371911 (closed) for similar issues.

Edited by Stéphane Talbot