gitlab-ci: Parametrize the osname and handle authenticated access
Make the downstreams' life easier by making the osname a parameter
that can be easily customized instead of hardcoding apertis in
multiple places.
When retrieving the artifacts, pass the job token so that things work fine even for downstreams requiring authenticated access.