Zenodo breaking changes

[MontrealSergiy]

Looks like last year Zenodo API had breaking changes.

It seems that token should be placed into Bearer authentication header, rather than get query.

The way how Tristan updated Zenodo Boutiques support, that can be used for a quickfix.

boutiques/boutiques@bcd6d26

Documentation allows URL parameter authorization, but multiple users complained that it does not work anymore

[MontrealSergiy]

https://support.zenodo.org/help/en-gb/31-api/209-what-is-the-difference-between-the-legacy-api-and-the-rest-api

[MontrealSergiy]

at the moment CBRAIN zenodo api is working after a typo fix, therefore old api still works.

Although Zenodo promotes a novel bucket api and using auth-token in query params is less secure than in header due to browser and server logs, this probably should be addressed within the zenodo gem (autogenerated).