gitlab-ci: Parametrize the osname and handle authenticated access

Make the downstreams' life easier by making the osname a parameter that can be easily customized instead of hardcoding apertis in multiple places.

When retrieving the artifacts, pass the job token so that things work fine even for downstreams requiring authenticated access.