feat: add secret for forgejo runner

hosts/raptus/default.nix

@@ -25,6 +25,7 @@ in
       owner = "rustypaste";
       group = "rustypaste";
     };
+    forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age;
   };
 
   boot.loader.grub = {

hosts/raptus/forgejo.nix

@@ -20,11 +20,11 @@ in
     instances."raptus" = {
       enable = true;
       name = "raptus";
-      tokenFile = config.age.secrets.forgejo-runner-token.age;
+      tokenFile = config.age.secrets.forgejo-runner-token.path;
       url = "https://git.ccnlc.eu";
       labels = [
         "debian-latest:docker://node:18-bullseye"
-        "nix:docker://ghcr.io/nydragon/runner:latest"
+        "nixos:docker://ghcr.io/nydragon/runner@sha256:0378d0f8ad08e2d4e541fba37c688fd46a3088d47314343ef3158ce94c7e1713"
       ];
     };
   };

secrets/forgejo-runner-token.age

@@ -1,7 +1,8 @@
 age-encryption.org/v1
--> ssh-ed25519 b3HlPA dBkOMVkozSkc7hGVGBV8KanAOqT57d/FGTyPQnZGQBM
-4MGa6vkR/XtD6scjA2giiDINdfFH4Y9Ebn/Pki7bxPM
--> ssh-ed25519 WcjW5A HOrY4chLCOJJQmZqn2ax8sBWqFi1MnzwUmT3qY1+Uxk
-4L36W1eX4rfzH0e6YWtJ4hEl5FoKA9Okd1CYNWP1yXU
---- syAd07l1R2c15ZVprT+nEw0IO2o/EAWPG0KieTVQxOE
-t³­ÆNÎh†ùN‰(sfEkS(¤Â)ž_kÐö K/iŽš˜<C5A1>eX/Ìí8„ÒhÚá«
S	øÁ”¼Œ‡É~‡éjœÒ$Ó
+-> ssh-ed25519 b3HlPA dlnUjkDRPRNWtziZtRBlCLatRFnfhUNl0KK5yqL8Zwk
+5px5axQKE46D0BMLSxZwvm0pnNx/8dyVIhDyNKKh4q0
+-> ssh-ed25519 WcjW5A /MtEneOoeJd8ygIoYEv8NKFQsPdLPHxpKgs5bT+hTwg
+t7Dsslx9BwyzmGd6QBnpuz+4d5UaVCFSutXax7ombKc
+--- xoCj85JiGHk9fx/l7wnJF2qt86mr62yOlIkuA6a0xk0
+²¶Hh=ÈÏêέ¢ª.!özàÂW
+;A3í1žX;œW€ œ«.B,ç¶&žhÚZ¤8x'ó¸ÉïOŠ°É²‘®%t‰éÒ†>Âm÷ÚÑ~سZ