chore(deploy): password sign-in's keys and GitHub's end

TOTP_KEY, RECOVERY_CODE_KEY and SIGN_IN_DECOY_KEY switch password
sign-in on (each at least 32 characters, or the server stops), and
GITHUB_SIGN_IN_ENDS names the day GitHub stops signing anyone in. CI
gives the test runs throwaway keys as it does the other passwords.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>

.forgejo/workflows/ci.yaml

@@ -131,6 +131,9 @@ jobs:
           for name in SERVERPOD_DATABASE_PASSWORD \
             SERVERPOD_PASSWORD_serverSideSessionKeyHashPepper \
             SERVERPOD_PASSWORD_emailSignInPepper \
+            SERVERPOD_PASSWORD_totpKey \
+            SERVERPOD_PASSWORD_recoveryCodeKey \
+            SERVERPOD_PASSWORD_signInDecoyKey \
             SERVERPOD_PASSWORD_serviceSecret; do
             echo "$name=$(openssl rand -hex 32)" >> "$FORGEJO_ENV"
           done