Make `apply-settings` send JSON in the request body, which enables us to
set values that take an array.

Use that to handle restricted_visibility_levels and import_sources.

This commit reflects the current state of production settings.

Bug: T284336

Remove reference to wmf-gitlab-tools.

This seems like a better user experience overall than getting sent with no
explanation to an IDP login form.