Not to be undertaken lightly, but if you have a thirst for danger and want to explore further you could try the download plugin I wrote about at Prefetch with authentication, for example Azure DevOps - #10 by JasonWalker
I have confirmation it works for authenticated access to one repo (mine). But it’ll expect to download the file from a tagged release, not necessarily whatever latest source is in ‘main’.
If you’re creating Releases and attaching the file to the latest Release in a predictable way it may be useful though.