To avoid having to specify COMPOSER_AUTH in all build/deployment containers, you CAN (not saying you should) set up a proxy with ingress-nginx and alias services to be able to pull packages without authentication from your cluster
THIS IS NOT SAFE, OBVIOUSLY
You need to disable SSL in composer, then you can use the repo to pull content from your private packagist feed