use CI_JOB_TOKEN and fix ci script

bin/update

@@ -8,6 +8,8 @@ REV_FILE="$ROOT/works/rev"
 
 # defaults
 REPO_URL="git@git.inker.bot:arknights/sing-box.git"
+if [[ $CI_JOB_TOKEN != "" ]]; then
+  REPO_URL=$(echo $REPO_URL | sed -i "s/git/gitlab-ci-token:$CI_JOB_TOKEN/")
 UPSTREAM_BRANCH="main"
 
 CONFIG="$ROOT/works/config"