Gabriel Brown d7d18e111d Keep the deploy key out of the printed CI script ...

The deploy step put ${{ secrets.DEPLOY_SSH_KEY }} straight into the run script. The runner prints that script, and Gitea does not mask a multi-line secret once it is split across script lines, so the key body appeared in every deploy log. The key now arrives through the step's env block.

2026-10-01 15:15:16 -04:00

..

workflows

Keep the deploy key out of the printed CI script

2026-10-01 15:15:16 -04:00