The only way I'm aware of to use a private action is to clone the repository it's in using a personal access token, and then use a local relative path to the action to run it.
another thing I have seen is preloading them on the runner itself and reference them via relative path