Jenkins CI handle push privileges

[jstastny-cz]

Previously all configured GitHub credentials used to have push privileges.

After the repository transfer, the privileges were removed and we've been given a single robot account with push privileges.

The goal here is to limit the exposure of the push privileges to the required minimum, for them to be used only in pipelines where they are necessary. For other operations (like checkout) we'll be using the existing tokens.