Currently using a PAT from my LRZ account, but this is not a good long-term solution. Could use a different account with a PAT that only has access to the website repo in LRZ GitLab.