this derivation will be built:
  /nix/store/49vx6ha2an30hgm0zfiwn8lv36a4lwap-effects-interpreter.drv
building '/nix/store/49vx6ha2an30hgm0zfiwn8lv36a4lwap-effects-interpreter.drv'
effects-interpreter> --- registry secretsMap per trigger
effects-interpreter> --- build_finished registry mapping and defaults
effects-interpreter> --- buildFinished maps to an unguarded event with literal argv and only its own secrets
effects-interpreter> --- buildFinished defaults grant no secrets and append no revision
effects-interpreter> --- buildFinished missing declared secret fails before the program runs
effects-interpreter> error: CLOUDFLARE_API_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- buildFinished missing forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- main execs the program with --rev and its secrets
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- main on a non-main token is skipped
effects-interpreter> EFFECT-GUARD: skipping outside a push to main (event=push ref=refs/heads/gitea-mq/batch/7)
effects-interpreter> --- missing secret fails before the program runs
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- null secret fails before the program runs
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequest runs unguarded, without --rev, with the forge token
effects-interpreter> --- missing forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequestClosed runs unguarded, without --rev, without the forge token
effects-interpreter> --- missing secret fails a pullRequestClosed run before the program runs
effects-interpreter> error: CLOUDFLARE_API_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequest never receives the main trigger's secrets
effects-interpreter> --- main never receives the pullRequest trigger's secrets or forge token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- registry: release-packages pullRequest runs the plan with the forge token and never GITHUB_TOKEN
effects-interpreter> --- registry: release-packages pullRequest without the forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- registry: release-packages main receives GITHUB_TOKEN and not the forge token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- registry: docs pullRequestClosed receives Cloudflare and not the forge token

upload niks3: ok