Move access token after build to minimize which steps can access it

Author: object-Object

.github/workflows/release.yml

@@ -114,6 +114,9 @@ jobs:
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
 
+      - name: Build mod
+        run: ./gradlew build
+
       # https://learn.microsoft.com/en-us/azure/devops/artifacts/quickstarts/github-actions
       - name: Get Azure access token
         if: inputs.dry_run == false
@@ -122,9 +125,6 @@ jobs:
             echo "::add-mask::$accessToken"
             echo "MAVEN_PASSWORD=$accessToken" >> $GITHUB_ENV
 
-      - name: Build mod
-        run: ./gradlew build
-
       - name: Publish to ${{ inputs.dry_run && 'Maven Local' || 'Maven' }}
         run: ./gradlew ${{ inputs.dry_run && 'publishToMavenLocal' || 'publish' }}