[BE] Add models and services for granular tokens

Add models to support granular PATs, following the proposal: https://internal.gitlab.com/handbook/engineering/development/sec/govern/authorization/