chore(ci): use dedicated dependabot org-secret to check out XML submodule

chore(ci): use dedicated dependabot org-secret to check out XML submodule #404