first token service implementation

Just copy and paste. It is basically the same image we use for api and app. Further a plain busybox image should not work since runtime dependencies are missing. Did not investigate that yet.