Bind publish job to Main environment

[kirich1409]

Summary

• Secrets (MAVEN_CENTRAL_, GPG_) are declared at the environment level (Main), not at the repo level.
• Without environment: Main on the publish job, GitHub Actions injects empty values into ${{ secrets.* }}, surfacing as Could not read PGP secret key when Gradle's signing plugin tries to use an empty signingInMemoryKey.
• This is the actual root cause of the failing tag publish (Prepare 1.0.0-Beta1 release #188 v1.0.0-Beta1) — the secret values themselves were fine.

Test plan

• Merge → re-run failed publish run 25993650354 → expect :featured-bom:signMavenPublication to succeed and bundle to upload to Central Portal.
• Verify in https://central.sonatype.com/publishing/deployments that dev.androidbroadcast.featured:1.0.0-Beta1 appears in VALIDATED status (local publish already produced one — this CI bundle will be the second).

[qodo-code-review]

Review Summary by Qodo

Bind publish job to Main environment for secrets

🐞 Bug fix

Walkthroughs

Description

• Bind publish job to Main environment for secret access
• Fixes signing failures due to empty secret injection
• Resolves root cause of failed v1.0.0-Beta1 tag publish

Diagram

flowchart LR
  A["Publish Job"] -- "environment: Main" --> B["Access Environment Secrets"]
  B --> C["MAVEN_CENTRAL_* & GPG_*"]
  C --> D["Gradle Signing Plugin"]
  D --> E["Successful Maven Central Upload"]

Loading

File Changes

1. .github/workflows/publish.yml 🐞 Bug fix +1/-0

Add environment binding to publish job

• Added environment: Main binding to publish job
• Ensures GitHub Actions injects secret values from Main environment
• Fixes "Could not read PGP secret key" error during signing

.github/workflows/publish.yml

---

[Copilot]

Pull request overview

Binds the publish job in publish.yml to the Main GitHub Actions environment so that environment-scoped secrets (Maven Central credentials and GPG signing key) are injected into the workflow, fixing the failing tag publish where empty secrets caused Could not read PGP secret key.

Changes:

• Add environment: Main to the publish job in .github/workflows/publish.yml.