You can clone with
HTTPS or Subversion.
Mopidy installed from a Debian package should be able to cache files to the system cache dir, e.g. /var/cache.
This is partly fixed now, but depends on #600 for a solution for extensions.
The only Debian package we have that this is currently relevant for is mopidy-spotify. I fixed it there in the commit mopidy/mopidy-spotify@bddbc55.