Create a SSH key (or token) with permission on one repository only, with Azure DevOps
You'll need to create an OAuth App and control its scopes or create a dedicated user in Azure DevOps to limit the security permissions of that user and generate a PAT for that.
The OAuth flow is quite a process, too much to capture in this answer.
Or use the Device Profile option.