Static API tokens ARE the alternative. He’s saying oauth is not worth the complexity, and increase the barrier to entry to using his API.
Static API keys are not a new or customer solution, they are the baseline. He’s saying stay at the baseline, oauth is not worth it.
Gitlab has a great set of CI tools for deploying docker images, and includes an internal registry of images automatically tied to your repo and available in CI.