Yeah that's the same thing I do. Except the credentials to upload or to interact with the infra in any way are not available during the build job in the workflow. Forgejo reuses the same GitHub conventions so initially they were all available there too