fix: use CVM_MEASURE_TOKEN to clone private cvm-measure repo

GITHUB_TOKEN is scoped to the current repo and cannot access
cvm-measure. Use a fine-grained PAT stored as CVM_MEASURE_TOKEN.

Ref: CC-192

Author: alhassankhedr-cohere

.github/workflows/build-podvm-cohere.yaml

@@ -116,10 +116,10 @@ jobs:
 
       - name: Install cvm-measure
         env:
-          GH_TOKEN: ${{ github.token }}
+          CVM_TOKEN: ${{ secrets.CVM_MEASURE_TOKEN }}
         run: |
           git clone --depth 1 --branch alhassankhedr/cc-167-tdx-measurement-toolkit \
-            https://x-access-token:${GH_TOKEN}@github.com/cohere-ai/cvm-measure.git /tmp/cvm-measure
+            https://x-access-token:${CVM_TOKEN}@github.com/cohere-ai/cvm-measure.git /tmp/cvm-measure
           pip install /tmp/cvm-measure
           rm -rf /tmp/cvm-measure
           cvm-measure --version