fix CI token

the CI_JOB_TOKEN appears to only have limited API access. so we are using the manually defined CI_API_TOKEN environment variable here that has a read_api scope.