Change --token command-line option into an environment variable

[KrisBoulez]

Please consider removing the --token command-line option (providing the SCM access token) and changing it to use an environmental variable.
As such the token is visible in "ps" listings and similar.
https://github.com/snyk-tech-services/snyk-repo-diff uses example-secrets.sh for this reason.