Add GitLab jobToken exploit

[frjcomp]

No description provided.

[Copilot]

Pull request overview

Adds a new GitLab gl jobToken exploit command path intended to validate a CI job token, download secure files, and attempt a repo write as an exploitation workflow within Pipeleek’s GitLab tooling.

Changes:

• Introduces new Cobra command group gl jobToken with exploit subcommand and config bindings.
• Adds pkg/gitlab/jobtoken implementation plus unit tests and GitLab e2e tests.
• Updates example configuration and documentation to include the new gitlab.jobToken.exploit.project setting.

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 8 comments.

Show a summary per file

File	Description
tests/e2e/gitlab/jobtoken/exploit_test.go	New e2e coverage for the gl jobToken exploit CLI flow (mock GitLab API).
pkg/gitlab/jobtoken/exploit.go	Implements job token validation, secure file download, and repo write attempt via git.
pkg/gitlab/jobtoken/exploit_test.go	Unit tests for URL normalization, branch naming, auth URL formatting, and token scrubbing.
internal/cmd/gitlab/jobToken/jobtoken.go	Adds jobToken root command with token prefix validation and inherited flag/config binding.
internal/cmd/gitlab/jobToken/exploit/exploit.go	Adds exploit subcommand and binds project config key.
internal/cmd/gitlab/gitlab.go	Registers the new jobToken command under gl.
pipeleek.example.yaml	Documents new gitlab.jobToken.exploit.project config entry.
docs/introduction/configuration.md	Documents new gitlab.jobToken.exploit.project config entry.
internal/cmd/gitlab/jobToken/jobtoken_test.go	Basic command wiring tests for jobToken root cmd.
internal/cmd/gitlab/jobToken/exploit/exploit_test.go	Basic command wiring tests for exploit subcommand.