Move the group deploy tokens revoke logic to a service to
avoid any missing anything in the future when we create APIs for revoke