setup: Clone CVNClerkBot read-only over https