ci: authenticate private screenpipe-fork git dep in the Rust job

[Akarsh-Hegde]

Problem

CI on #330 (pre-main → main) fails at the Rust job:

fatal: could not read Username for 'https://github.com': No such device or address
error: failed to get `screenpipe-a11y` as a dependency of package `meridian-tray`
  ... Unable to update https://github.com/Meridiona/screenpipe-fork?rev=d6d2b318...

ci.yml's rust job runs cargo fmt/clippy/test over the whole workspace. That resolves the tray's screenpipe-screen / screenpipe-a11y deps — a git dependency on the private Meridiona/screenpipe-fork — even though they're optional / capture-gated and never compiled here. With only the repo-scoped GITHUB_TOKEN, cargo's git fetch of the fork can't authenticate, so the job dies before clippy even runs.

Fix

Port the exact mechanism release.yml and release-staging.yml already use (those jobs build the tray against the fork and pass):

• CARGO_NET_GIT_FETCH_WITH_CLI: "true" on the rust job — cargo's libgit2 ignores url.insteadOf; the git CLI honors it.
• A git config --global url."https://x-access-token:${GH_TOKEN}@…".insteadOf … step using secrets.GH_TOKEN (already proven to read the fork — the release check is green on release: fold dashboard into Tauri + self-contained DMG + in-process capture (pre-main → main) #330).

No source/build changes; CI-only. Merging this into pre-main re-triggers #330's CI, which should then go green.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 5a083609-879d-406e-a1ab-fd414edbdeef

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/ci-private-fork-auth

---

_{Comment @coderabbitai help to get the list of available commands.}