Prevent authentication data being written to disk

Avoid having them saved on `.git/config` [by not using `clone` and explicitly passing URLs to `fetch`](https://github.com/blog/1270-easier-builds-and-deployments-using-git-over-https-and-oauth).

Note: check it they aren't saved to the `reflog` anyway or, if that's still the case, fix it too.