fix: restrict permissions on CI_SSH_KEY_FILE

After a GitLab update it now seems to be creating a file for file secrets before the container entrypoint runs rather than after. The file it creates is world-readable, and SSH refuses to add private keys from world-readable files, so we need to make CI_SSH_KEY_FILE readable by only the owner.