To further simplify the Quay workflow, today I looked at connecting authentik for CLI clients.
This way it is now possible to log in to Quay with the authentik credentials, for example with the docker cli. So it is no longer necessary to create a robot account or application token.