ci-fairy: allow to fetch private dependent repos

Right now ci-fairy assumes that remotes are public.
However, we can pass the CI_JOB_TOKEN to retrieve
private upstream projects.

Signed-off-by: Benjamin Tissoires <benjamin.tissoires@gmail.com>
4 jobs for master in 1 minute and 55 seconds (queued for 1 second)
Child pipeline (parent)
Status Job ID Name Coverage
  Bootstrapping
passed #7714133
aarch64
bootstrap@aarch64

00:01:30

passed #7714132
bootstrap@x86_64

00:01:38

 
  Bootstrapping Qemu
passed #7714135
kvm
bootstrap-qemu-mkosi@x86_64

00:00:17

passed #7714134
bootstrap-qemu@x86_64

00:00:17