Why not use a lightweight bash or git image and do your gitops in the job's script block? If you don't want to mess with your build job, then a job in the upstream stage of the build would create the PR, the build runs, another job would then merge the PR if the build succeeds.
Not to minimize the danger but I think it's the death throws of a group that sees their membership counts falling year over year. Religious participation is decreasing, globally, and they damn well know that.
WiFi passwords? I think you mean SSIDs (wifi name).