Fix review/qa pipelines in dev.gitlab.org

Summary

Based on discussion in #447 (comment 738599607) we need to add API tokens to the pipeline to allow for creation of an imagePullSecret for Operator deployments in dev (because that instance, and its container registry, are private).

Acceptance criteria

• Project API token is created with read registry access
• API token is added as a Secret in the default namespace (kubectl create secret docker-registry dev-registry-pull-secret --docker-username=<unsure?> --docker-password=<API token> --docker-server=dev.gitlab.org:5005)
• CI is configured to copy the Secret into the review namespace
• GitLab CR template is configured to specify the image pull secret (global.image.pullSecrets[0].name=dev-registry-pull-secret)