Keep secrets out of the release matrix, where Actions rejects them

.github/workflows/release.yml

@@ -24,12 +24,8 @@ jobs:
       matrix:
         include:
           - registry: ghcr.io
-            login_username: ${{ github.actor }}
-            login_password: ${{ secrets.GITHUB_TOKEN }}
             soft: "false"
           - registry: git.tben.me
-            login_username: ${{ secrets.GITEA_USERNAME }}
-            login_password: ${{ secrets.GITEA_TOKEN }}
             soft: "true"
     continue-on-error: ${{ matrix.soft }}
     steps:
@@ -39,12 +35,21 @@ jobs:
 
       - uses: docker/setup-buildx-action@v3
 
-      - name: Log in to ${{ matrix.registry }}
+      - name: Log in to GHCR
+        if: matrix.registry == 'ghcr.io'
         uses: docker/login-action@v3
         with:
           registry: ${{ matrix.registry }}
-          username: ${{ matrix.login_username }}
+          username: ${{ github.actor }}
-          password: ${{ matrix.login_password }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Log in to Gitea
+        if: matrix.registry == 'git.tben.me'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ matrix.registry }}
+          username: ${{ secrets.GITEA_USERNAME }}
+          password: ${{ secrets.GITEA_TOKEN }}
 
       - name: Work out image tags
         id: tags