Thanks for the pointers.

adding the following to get a token did the trick: $(az account get-access-token --resource 499b84ac-1321-427f-aa17-267ca6975798 --query "accessToken" --output tsv)

I then added the get token as so:

--gitrepo-url "https://azurereposuser:$(az account get-access-token --resource 499b84ac-1321-427f-aa17-267ca6975798 --query "accessToken" --output tsv)@dev.azure.com/org/devops/_git/dbtproject"