Add a deployment for forgejo-ci

use passed args

tag part

fix secrets

infra/forgejo-ci/flake-part.nix

@@ -46,10 +46,10 @@ in
 
           age.secrets = concatMapAttrs (
             name: secret:
-            optionalAttrs (elem hostPublicKey secret.publicKeys) ({
-              ${removeSuffix ".age" name}.file = ../../secrets/${name};
-            })
-          ) secrets;
+            optionalAttrs (elem hostPublicKey secret.publicKeys) {
+              ${removeSuffix ".age" name}.file = secrets.rootPath + "secrets/${name}";
+            }
+          ) secrets.mapping;
 
           users.users.root.openssh.authorizedKeys.keys = attrValues keys.contributors;
         };