Pass FORGEJO_REGISTRY_USER and FORGEJO_REGISTRY_TOKEN via environment variables instead of direct secret interpolation. This is the standard approach used across all repos and prevents credentials from being exposed in logs or shell history. Fixes registry login failures by using the proven pattern from riotpiao.com.