enhancement: granular access token

[AndreyYolkin]

Description

Hello, while cooking a reproduction for other's issue I figured out that I can't create an api token scoped for a team/project. There will be more cases where we might want to ad fine-graining tokens, like for a future CI/CD

I suggest to implement fine-grained tokens in shelve

Additional context

Honorable mention: github blog about fine-grained tokens: https://github.blog/security/application-security/introducing-fine-grained-personal-access-tokens-for-github/

[HugoRCD]

@AndreyYolkin Yes, it's definitely something I'm thinking about. I'd have to look into redesigning the token system to make it more complete but also simpler!