Extract Client::token() with the get-or-fetch logic for CSRF tokens
This will be used later on by the uploading code that can't use post_with_token().
How to register an account on GitLab. To prevent spam, new accounts are locked until approved by an admin or the approver bot. You can also file an unlock request to expedite access.
Support: mw:GitLab, how to host a project on GitLab, #wikimedia-gitlab on libera.chat, #GitLab on Phabricator.
This will be used later on by the uploading code that can't use post_with_token().