fix(ci): use id_tokens

.gitlab-ci.yml

@@ -3,9 +3,12 @@
   services:
     - alias: vault
       name: harbor.gwdg.de/sub-fe-pub/vault-client-for-gitlab-ci
+  id_tokens:
+    VAULT_ID_TOKEN:
+      aud: https://secs.sub.uni-goettingen.de
   variables:
-    # pass JWT to the service container, repeat when redeclaring key 'variables'
-    VAULT_CI_JOB_JWT: "$CI_JOB_JWT"
+    # pass JWT to the service container
+    VAULT_CI_JOB_JWT: "$VAULT_ID_TOKEN"
 .harbor-secrets: &secrets-harbor
   # requires service: vault and variable VAULT_CI_JOB_JWT
   - export HARBOR_TOKEN=$(wget -q -O - "http://vault:8000/?role_name=gitlab-${CI_PROJECT_PATH//\//-}&path=dariah/${CI_PROJECT_PATH}/harbor&key=token")