Run sync_service_token_worker randomly once per hour, but only call CDot when the token is old

What does this MR do and why?

This MR will run the sync_service_token_worker job once per hour (randomly timed), but it will return early if the token is valid for more than 2 days. This will try the job more often, but only call CDot when the token is at least a day old, that means we won't call CDot more than once per day for a new token (same as we do now), but we try it more often.

References

How to set up and validate locally

MR acceptance checklist

Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.