What I got so far is, it is possible to Authenticate with Personal Access Token and include external CI script but a cleaner approach would be
Personal Access Token
Still there is no support for the CI_JOB_TOKEN to have a useful API access. But they are working on it https://gitlab.com/groups/gitlab-org/-/epics/3559
CI_JOB_TOKEN