follow-up: Infinitive loop protection on CI_JOB_TOKEN push to repository

Related to: #389060 (closed) Rollout issue: #468320 (closed)

MRs:

1. !152096 (merged)
2. !154111 (merged)

CI_JOB_TOKEN allows to clone private repo, but doesn't allow to push back to the same repo.

This issue is a follow-up to create such protection before we can release this feature - #468320 (closed)

A main concern is an infinitive loop - !154111 (comment 1940996093)

Other Requirements

Please ping @hsutor in this MR once this issue is complete so we can officially transition CI_Job_Token to groupauthentication