token: add created_at field to the token
This will allow us to check if the token is expired.
This includes adding a crd for deployment tokens as we have to store more than just the contents of the token.
Signed-off-by: David Caro dcaro@wikimedia.org