currently, POST /deployment/token is used for both creating the token and refreshing it.
To avoid users accidentally refreshing a valid token (and having to change it wherever they use it), we should separate refreshing the token to use PUT, then make changes in cli the to create a separate update or refresh subcommand, add a confirmation prompt before overwriting an existing token, etc.