feat: add deploy tokens (#37306)

Deploy keys only work over SSH. A deploy token is their counterpart for HTTPS: a repository scoped credential, used as the password of a Git request, with read or read and write access. It covers Git operations and LFS, and can be regenerated in place.

Signed-off-by: silverwind <me@silverwind.io>
Co-authored-by: Claude Mythos <noreply@anthropic.com>
Co-authored-by: silverwind <me@silverwind.io>
Co-authored-by: bircni <bircni@icloud.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

models/fixtures/repo_unit.yml

@@ -748,4 +748,18 @@
   config: "{}"
   created_unix: 946684810
 
+-
+  id: 113
+  repo_id: 19
+  type: 1
+  config: "{}"
+  created_unix: 946684810
+
+-
+  id: 114
+  repo_id: 20
+  type: 1
+  config: "{}"
+  created_unix: 946684810
+
 # DO NOT add more test data in the fixtures, test case should prepare their own test data separately and clearly