escape action expressions for gitea template engine

.gitea/workflows/build.yml

@@ -14,7 +14,9 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Login to Gitea Registry
-        run: echo "${{ secrets.CI_REGISTRY_TOKEN }}" | docker login git.timothykim.net -u timothykim --password-stdin
+        env:
+          REGISTRY_TOKEN: $${{ secrets.CI_REGISTRY_TOKEN }}
+        run: echo "$REGISTRY_TOKEN" | docker login git.timothykim.net -u timothykim --password-stdin
 
       - name: Build and Push
         uses: docker/build-push-action@v5
@@ -24,8 +26,11 @@ jobs:
           tags: git.timothykim.net/hantim/${REPO_NAME}:latest
 
       - name: Deploy
+        env:
+          DEPLOY_SSH_KEY: $${{ secrets.DEPLOY_SSH_KEY }}
+          DEPLOY_HOST: $${{ vars.DEPLOY_HOST }}
         run: |
           mkdir -p ~/.ssh
-          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
+          echo "$DEPLOY_SSH_KEY" > ~/.ssh/deploy_key
           chmod 600 ~/.ssh/deploy_key
-          ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key deploy@${{ vars.DEPLOY_HOST }} deploy-${REPO_NAME}
+          ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key deploy@"$DEPLOY_HOST" deploy-${REPO_NAME}