Best practice for authentication in test and CI environments?

You can get a development environment in which to test apps which I recommend. Each app should get its own API token/access token etc so you can remove/add apps at will. If you got an environment like bitbucket or git then each developer should have an environment file they can plug into each app (if needed).