Merge branch 'dbiryukov_prevent_job_token_from_admin_permissions_mr-474775' into 'master'

Return false on admin condition if an user authenticated with a job token

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/167449



Merged-by: Erick Bajao <fbajao@gitlab.com>
Approved-by: Erick Bajao <fbajao@gitlab.com>
Approved-by: Greg Myers <gmyers@gitlab.com>
Approved-by: mo khan <mo@mokhan.ca>
Co-authored-by: Dmytro Biryukov <dbiryukov@gitlab.com>