[8.0] feat: pilot submission with tokens in a multi-VO setup

[aldbr]

Aims at solving #7207
This is the implementation of the second solution.

Pros: very easy to implement as you can see
Cons: it does not work if a given CE accepts tokens from VO "A" but not from VO "B", while they are both ready to use tokens. Can it happen?

BEGINRELEASENOTES
*WorkloadManagement
CHANGE: pilot submission with tokens in a multi-VO context
ENDRELEASENOTES

[aldbr]

I changed the approach.
Now you can specify Tag = Token:<VO> to make sure that only a given set of VO will use tokens in a CE.

Pros: very easy to implement as you can see, DIRAC sysadmins keep control of what is done.
Cons: needs a lot of actions from the DIRAC sysadmins.

There was another approach requiring no change of the code, which would have consisted in copying each queue (one with Tag = Token, the other without it). The approach was consistent but hard to manage, @marianne013 and I decided not to go through this path.

[marianne013]

This looks like what we agreed on.

[DIRACGridBot]

Sweep summary

Sweep ran in https://github.com/DIRACGrid/DIRAC/actions/runs/6582727808

Successful:

• integration