fix: GITHUB_TOKEN is a secret

.github/workflows/docker-image.yaml

@@ -39,13 +39,13 @@ jobs:
         run: gradle -Prelease.useLastTag=true final jib
         env:
           USERNAME: ${{ github.actor }}
-          PASSWORD: ${{ GITHUB_TOKEN }}
+          PASSWORD: ${{ secrets.GITHUB_TOKEN }}
       - name: Create and publish docker image
         if: github.event_name == 'pull_request'
         run: gradle snapshot jib
         env:
           USERNAME: ${{ github.actor }}
-          PASSWORD: ${{ GITHUB_TOKEN }}
+          PASSWORD: ${{ secrets.GITHUB_TOKEN }}
       - name: Extract Jib digest
         id: digest
         run: |
@@ -63,7 +63,7 @@ jobs:
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ GITHUB_TOKEN }}
+          password: ${{ secrets.GITHUB_TOKEN }}
       - name: Extract metadata (tags, labels) for Docker
         id: meta
         uses: docker/metadata-action@v5