Use access token to publish docker image in CI

So it seems that quay.io now supports [oauth2](https://docs.quay.io/api/) and allows using access token to login to docker cli.

TODO:
- [ ] Update to use token to publish docker image

#### Note
That doc doesn't mention generating a token in the console/portal but only requesting a token with canonical oauth flow. It might require some more reading/investigation in making that token long-lived to be useful in a CI environment.

No file or test is named. Read the repository's CI configuration and the linked Quay OAuth2 documentation first, then determine how a long-lived access token can be supplied securely in CI. Done means the CI job logs in with the token and successfully publishes the Docker image.

Written by the indexing model from the issue text.