fix/ci-secrets-syntax
main
Woodpecker v2 requires `from_secret` inside the environment block. The top-level `secrets` key is deprecated and rejected by the linter. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>