ci: use project PAT secret to allow readonly access to private repo

ci: use project PAT secret to allow readonly access to private repo #10