The best solution would be to add oauth2 to your PHP site and configure this oauth2 provider in Zammad, under Manage > Settings > Security. All other solutions (where you would pass the password around) would be hacks and security problems waiting to happen.
The good news is, there’s probably easy pre-baked modules for your app platform to add oauth2 to your app.