use CI_JOB_TOKEN and fix ci script

.gitlab-ci.yml

@@ -1,7 +1,7 @@
 build-android:
   image: golang:1.25.9-trixie # according to the original ~1.25.7
   before_script: |
-    sudo apt update && sudo apt install -y openjdk-17-jdk-headless
+    apt update && apt install -y openjdk-17-jdk-headless
     /usr/lib/jvm/java-17-openjdk-amd64/bin/java --version
     mkdir -p ~/.ssh && ssh-keyscan -p 22 -t rsa,ed25519 git.inker.bot >> ~/.ssh/known_hosts
   script:

bin/update

@@ -8,6 +8,8 @@ REV_FILE="$ROOT/works/rev"
 
 # defaults
 REPO_URL="git@git.inker.bot:arknights/sing-box.git"
+if [[ $CI_JOB_TOKEN != "" ]]; then
+  REPO_URL=$(echo $REPO_URL | sed -i "s/git/gitlab-ci-token:$CI_JOB_TOKEN/")
 UPSTREAM_BRANCH="main"
 
 CONFIG="$ROOT/works/config"