Enforce allowlisted permissions for CI Jobs
When accessing a project from a CI Job, only allowlisted permissions are allowed.
Issue: gitlab-org/govern/authorization/team-tasks#67