secretize jwt secret

.gitea/workflows/deploy-api.yaml

@@ -39,5 +39,6 @@ jobs:
       - name: Deploy container
         run: |
           export POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }}
+          export JWT_SECRET=${{ secrets.JWT_SECRET }}
           docker compose -f ./api/docker-compose.prod.yaml pull agologum-api
           docker compose -f ./api/docker-compose.prod.yaml up -d --force-recreate agologum-api

api/appsettings.json

@@ -11,7 +11,7 @@
   "AllowedHosts": "*",
   "https_port": 443,
   "Jwt": {
-    "Key": "local_secret_but_longer_this_time_so_it_actually_works",
+    "Key": "${JWT_SECRET}",
     "Issuer": "agologum-api",
     "Audience": "agologum-users"
   }