Accessibility versus security of token expiry

[jnywong]

Capturing the comment to be addressed below:

There's a balance between accessibility and security to be struck here, what do we think? I also think that the Grafana token should be stored as an organizational 2i2c secret since there are multiple uses, to avoid secrets proliferating. Happy to update the team compass with what we decide on this.

Originally posted by @jnywong in #859 (comment)