fix: Parse tofu env vars in step instead of job

.forgejo/workflows/tofu-plan-k8s-wheatley.yaml

@@ -17,8 +17,6 @@ env:
   AWS_S3_ENDPOINT: ${{ secrets.AWS_S3_ENDPOINT }}
   AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
   AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-  TF_VAR_PROXMOX_API_TOKEN: ${{ secrets.PROXMOX_API_TOKEN }}
-  TF_VAR_PROXMOX_ENDPOINT: ${{ secrets.PROXMOX_ENDPOINT }}
 
 jobs:
   tofu-plan-k8s-wheatley:
@@ -35,6 +33,7 @@ jobs:
           echo "Downloaded OpenTofu ✅"
           echo "Verifying checksum..."
           printf "%s %s" "${{ env.TOFU_CHECKSUM }}" "${{ env.TOFU_ARCHIVE }}" | sha256sum --check --status
+          echo "Checksum ok ✅"
       working-directory: /tmp
 
 
@@ -68,6 +67,9 @@ jobs:
 
     - name: OpenTofu Plan
       id: plan
+      env:
+        TF_VAR_PROXMOX_API_TOKEN: ${{ secrets.PROXMOX_API_TOKEN }}
+        TF_VAR_PROXMOX_ENDPOINT: ${{ secrets.PROXMOX_ENDPOINT }}
       run: tofu plan -no-color
       working-directory: ${{ env.TOFU_DIR }}
       continue-on-error: true