fix: resolve GitHub Actions workflow syntax errors

Move secret access to job-level environment variables to avoid
'Unrecognized named-value: secrets' errors in conditional expressions.
This follows GitHub Actions best practices for secret handling.

Author: avrabe

.github/workflows/docs-deploy.yml

@@ -18,6 +18,12 @@ jobs:
     runs-on: ubuntu-latest
     # Only run on main branch to prevent accidental deployments
     if: github.ref == 'refs/heads/main'
+    env:
+      NETCUP_URI: ${{ secrets.NETCUP_URI }}
+      NETCUP_USER: ${{ secrets.NETCUP_USER }}
+      NETCUP_PASSWORD: ${{ secrets.NETCUP_PASSWORD }}
+      CLOUDFLARE_ZONE_ID: ${{ secrets.CLOUDFLARE_ZONE_ID }}
+      CLOUDFLARE_TOKEN: ${{ secrets.CLOUDFLARE_TOKEN }}
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -44,9 +50,9 @@ jobs:
         if: env.NETCUP_URI != '' && env.NETCUP_USER != '' && env.NETCUP_PASSWORD != ''
         uses: SamKirkland/[email protected]
         with:
-          server: ${{ secrets.NETCUP_URI }}
-          username: ${{ secrets.NETCUP_USER }}
-          password: ${{ secrets.NETCUP_PASSWORD }}
+          server: ${{ env.NETCUP_URI }}
+          username: ${{ env.NETCUP_USER }}
+          password: ${{ env.NETCUP_PASSWORD }}
           local-dir: ./docs-site/dist/
           server-dir: /
           exclude: |
@@ -55,23 +61,14 @@ jobs:
             **/node_modules/**
             **/.DS_Store
             **/Thumbs.db
-        env:
-          NETCUP_URI: ${{ secrets.NETCUP_URI }}
-          NETCUP_USER: ${{ secrets.NETCUP_USER }}
-          NETCUP_PASSWORD: ${{ secrets.NETCUP_PASSWORD }}
       
       - name: Skip deployment (secrets not configured)
         if: env.NETCUP_URI == '' || env.NETCUP_USER == '' || env.NETCUP_PASSWORD == ''
         run: echo "Skipping deployment - Netcup secrets not configured"
-        env:
-          NETCUP_URI: ${{ secrets.NETCUP_URI }}
-          NETCUP_USER: ${{ secrets.NETCUP_USER }}
-          NETCUP_PASSWORD: ${{ secrets.NETCUP_PASSWORD }}
 
       - name: Purge Cloudflare cache (optional)
         if: env.CLOUDFLARE_ZONE_ID != ''
         uses: jakejarvis/cloudflare-purge-action@master
-        env:
-          CLOUDFLARE_ZONE: ${{ secrets.CLOUDFLARE_ZONE_ID }}
-          CLOUDFLARE_TOKEN: ${{ secrets.CLOUDFLARE_TOKEN }}
-          CLOUDFLARE_ZONE_ID: ${{ secrets.CLOUDFLARE_ZONE_ID }}
+        with:
+          zone: ${{ env.CLOUDFLARE_ZONE_ID }}
+          token: ${{ env.CLOUDFLARE_TOKEN }}