match host --> env vars

.forgejo/actions/renovate/action.yaml

@@ -44,6 +44,7 @@ runs:
         RENOVATE_PLATFORM: gitea
         RENOVATE_REPOSITORY_CACHE: 'enabled'
         RENOVATE_TOKEN: ${{ inputs.token }}
+        RENOVATE_HOST_RULES: '[{"matchHost":"docker.io","username":"${{ env.DOCKER_USERNAME }}","password":"${{ env.DOCKER_PASSWORD }}"}]'
 
         GIT_AUTHOR_NAME: 'Renovate Bot'
         GIT_AUTHOR_EMAIL: 'smeagol@hsn.dev'

.forgejo/workflows/renovate.yaml

@@ -44,8 +44,8 @@ jobs:
           endpoint: https://git.hsn.dev/api/v1/
           token: ${{ secrets.RENOVATE_TOKEN }}
           github-token: ${{ secrets.GH_TOKEN }}
-          args: >-
-            --platform gitea
-            --autodiscover
-            --host-rules='[{"matchHost":"docker.io","username":"${{ env.DOCKER_USERNAME }}","password":"${{ env.DOCKER_PASSWORD }}"}]'
+          args: --platform gitea --autodiscover
           save-cache: true
+        env:
+          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}