Clone danger source project with job token

What does this MR do?

This execution path can also occur for private projects, in which case we need credentials to clone. See https://gitlab.com/gitlab-org/security/omnibus-gitlab/-/merge_requests/377 for example (internal link).

Check-list

• Ensure commits include Changelog: trailer
• Verify the change in all affected pipelines.