feat: genericise token fetching

Add generic job templates which can fetch a Google secret into an
environment variable and fetch the Gitlab API token from the right
Google secret.

Update the release-it.yml template to make use of this.

Closes #60