Fix: pass AUR_SSH_KEY via env var to avoid secret masking corruption

.github/workflows/publish-aur.yml

@@ -62,9 +62,11 @@ jobs:
           EOF
 
       - name: Set up SSH for AUR
+        env:
+          AUR_SSH_KEY: ${{ secrets.AUR_SSH_KEY }}
         run: |
           mkdir -p ~/.ssh
-          printf '%s' "${{ secrets.AUR_SSH_KEY }}" | base64 -d > ~/.ssh/aur
+          printf '%s' "$AUR_SSH_KEY" | base64 -d > ~/.ssh/aur
           chmod 600 ~/.ssh/aur
           ssh-keyscan aur.archlinux.org >> ~/.ssh/known_hosts
           ssh -i ~/.ssh/aur -o StrictHostKeyChecking=no -T aur@aur.archlinux.org || true