why you need ssh key for CI? The CI_JOB_TOKEN or scoped PAT also works via http to pull/push the code.