phabricator: randomly select the API token in the provided list

instead of picking the first one, so this behavior is consistent with ListerHttpTransport's one.

Depends on !84 (closed)

---

Migrated from D1927 (view on Phabricator)