Change auth method in releasepy: remove shared token and use Jenkins API tokens

[j-rivero]

Making @nuclearsandwich happy. Remove the token used in DSL.

• Change to remove the existing token 19f9405
• Change the authentication model to use per-user Jekins API tokens: 41d75d8

Developers documentation update: gazebosim/docs#538

This change will break existing nightly scheduler calls. A subsequent PR should take care of it.

[j-rivero]

The second commit in the PR changes the auth model from using a job token via GET parameter named 'token' to use a basic_auth model over https using POST. It works with the same config file than the ros_buildfarm code.

[scpeters]

it would be helpful to document somewhere the python dependencies needed to run release.py. I am using a python venv, so with trial and error I installed the missing dependencies, but it could be clearer

[azeey]

Or avoid using libraries outside of the python standard libraries if possible.

[j-rivero]

it would be helpful to document somewhere the python dependencies needed to run release.py. I am using a python venv, so with trial and error I installed the missing dependencies, but it could be clearer

I added basic python metadata in ccf062b and updated the documentation in gazebosim/docs#538

Or avoid using libraries outside of the python standard libraries if possible.

Need to double check if we can get rid of urlib3 now that I have clear how the credentials work through GET/POST. Don't want to make more changes in this PR, let's try in a different one.

[scpeters]

I did it!

https://build.osrfoundation.org/job/sdformat15-source/6/

[j-rivero]

Note that this needs to wait to be merged to #1206 to be ready

[j-rivero]

Changes coming from #1206:

• Implement --auth for release.py
• Use --auth from releasepy in nightly/releasepy jobs
• Add osrfbuild permission to call -debbuilder and brew_release

[j-rivero]

Testing the nightly run with --dry-run. The output seems promising:

https://build.osrfoundation.org/job/ignition-__upcoming__-nightly-scheduler/26/console

...
+ echo 'releasing gz-tools3 (from branch main)'
releasing gz-tools3 (from branch main)
+ python3 ./scripts/release.py --dry-run gz-tools3 nightly --auth osrfbuild:**** --release-repo-branch main --nightly-src-branch main --upload-to-repo nightly
Downloading releasing info for gz-tools3
Linux distributions in the -release repository:
 + focal  ('amd64', 'armhf', 'arm64')
 + jammy  ('amd64', 'armhf', 'arm64')
Safety checks:
 + OK No underscore in package name
 + OK Package names in changelog and control
 + OK Jenkins credentials are good
Simulation of jobs to be called if not dry-run:
 + Releasing ubuntu focal/amd64 in https://build.osrfoundation.org//job/gz-tools3-debbuilder?search=nightly-1
 + Releasing ubuntu jammy/amd64 in https://build.osrfoundation.org//job/gz-tools3-debbuilder?search=nightly-1
+ echo ' - done'
...

[j-rivero]

Added a warning for the developers using the current shared token 2a070f8