Follows the same pattern already used for JWT_SECRET_KEY: interpolated from a required env var, sourced from a Gitea Actions secret in CI.
Reviewed-on: #2 Co-authored-by: James Wampler <james@wamp.dev> Co-committed-by: James Wampler <james@wamp.dev>