ci: Build secrets server on PRs, publish on releases. (#1)

Co-authored-by: jmug <u.g.a.mariano@gmail.com>
Reviewed-on: #1

.gitea/workflows/build-secretsserver.yaml

@@ -3,9 +3,10 @@ name: build-secretsserver
 on:
   push:
     branches:
-      - main
-  # Only run on release tags.
-  tags: ["v*"]
+      - "main"
+    # Only run on release tags.
+    tags:
+      - "v*"
   pull_request:
 
 jobs:
@@ -17,11 +18,11 @@ jobs:
       # Unfortunately gotta use a PAT,
       # workflow tokens can't access the registry yet.
       - name: Log in to the registry
-        if: gitea.event_name != 'pull_request'
+        if: ${{ gitea.ref_type == 'tag' }}
         uses: docker/login-action@v3
         with:
           registry: git.handmadecities.com
-          username: ${{ vars.REGISTRY_USER }}
+          username: ${{ secrets.REGISTRY_USER }}
           password: ${{ secrets.REGISTRY_TOKEN }}
 
       - name: Compute tags