New policies for personal access tokens

In this sprint, we added new policies to restrict scope and lifespan of personal access tokens (PAT).