release/ci: Pass through GPG auth for releases (#3460)

Signed-off-by: Ryan Northey <ryan@synca.io>

Author: phlax

.github/workflows/_publish.yml

@@ -78,6 +78,8 @@ jobs:
     secrets:
       app-id: ${{ secrets.app-id }}
       app-key: ${{ secrets.app-key }}
+      gpg-key: ${{ secrets.gpg-key }}
+      gpg-password: ${{ secrets.gpg-password }}
     if: >-
       inputs.conclusion == 'success'
       && ! inputs.skip

.github/workflows/_publish_release.yml

@@ -108,8 +108,8 @@ jobs:
         inputs.artifacts
       uses: envoyproxy/toolshed/actions/gpg@fa7bbf3b718788fe1d3f3606afa92304748559e2
       with:
-        gpg-key: ${{ secrets.gpg-key }}
-        gpg-password: ${{ secrets.gpg-password }}
+        gpg-key: ${{ ! inputs.dry-run && secrets.gpg-key || '' }}
+        gpg-password: ${{ ! inputs.dry-run && secrets.gpg-password || '' }}
     - name: Release title (eg commit message)
       id: title
       uses: envoyproxy/toolshed/actions/jq@fa7bbf3b718788fe1d3f3606afa92304748559e2