ci(drone): move secrets down

.drone.yml

@@ -1,13 +1,6 @@
 kind: pipeline
 name: default
 
-environment:
-    DRONE_GIT_USERNAME: x-oauth-token
-    DRONE_GIT_PASSWORD:
-        from_secret: GITEA_TOKEN
-    GITEA_TOKEN:
-        from_secret: GITEA_TOKEN
-
 steps:
     - name: build
       image: registry.gitlab.com/dmoonfire/nix-flake-docker:latest
@@ -21,3 +14,6 @@ steps:
       image: registry.gitlab.com/dmoonfire/nix-flake-docker:latest
       commands:
           - nix develop --command scripts/release.sh
+      environment:
+          GITEA_TOKEN:
+              from_secret: GITEA_TOKEN