Add GQL endpoint for toggling JWT access

What does this MR do and why?

For #360657 (closed). backend component for !92711 (merged).

The opt_in_jwt field allows the user to limit JWT access from pipeline jobs such that the token must be manually declared in each job that needs it.

Screenshots or screen recordings

How to set up and validate locally

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.