Thanks Jeasen for your valuable feedback.
At that time, when I wrote this I was mainly focused on the Git tagging part instead of the authentication and security best practices. Also, the usage of GitLab CICD variables was very lightly described at the end. I've updated a that.
And I also value your suggestion regarding the creation of a robot account instead of directly using your main account's personal access token. Even we use PAT on both the cases, it has its pros. I've added that section too. Thanks for pointing that out, really appreciate it.