fix: security, keycloak SSOT, restart policy, arch-test reaktiviert

Co-authored-by: Junie <junie@jetbrains.com>

.gitea/workflows/docker-publish.yaml

@@ -53,6 +53,12 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
+      - name: Load .env variables
+        run: |
+          grep -v '^#' .env | grep -v '^$' | while IFS='=' read -r key value; do
+            echo "${key}=${value}" >> $GITHUB_ENV
+          done
+
       - name: Set up JDK ${{ env.JAVA_VERSION }}
         uses: actions/setup-java@v4
         with:
@@ -140,5 +146,5 @@ jobs:
             VERSION=${{ github.sha }}
             GRADLE_VERSION=${{ env.GRADLE_VERSION }}
             JAVA_VERSION=${{ env.JAVA_VERSION }}
-            KEYCLOAK_IMAGE_TAG=26.4
+            KEYCLOAK_IMAGE_TAG=${{ env.KEYCLOAK_IMAGE_TAG }}
             JVM_OPTS_APPEND=${{ env.JVM_OPTS_ARM64 }}