Use non-deprecated value arg for github_actions_secret

[nickvigilante]

The integrations/github provider (v6) deprecates plaintext_value on github_actions_secret in favor of value — tofu plan/apply emits a deprecation warning for all 7 secrets. Rename the argument across homelab/github.tf.

• tofu validate passes (confirms value is the accepted attribute).
• tofu fmt re-aligned the blocks.
• Expected on next apply: at most a one-time in-place re-push of the 7 secrets (values unchanged) as Terraform reconciles the attribute rename — no destroy/recreate.

No behavior change; purely silences the deprecation and future-proofs against its removal.

[github-actions]

homelab tofu plan

Plan output

tailscale_dns_preferences.main: Refreshing state... [id=ad9f64d5-f380-ae42-4811-7604bfdb5bcd]
tailscale_acl.main: Refreshing state... [id=acl]
tailscale_dns_nameservers.global: Refreshing state... [id=34619e51-87ec-b5df-c078-fd2e3181d9c5]
data.github_user.self: Reading...
github_repository.managed["styleguide"]: Refreshing state... [id=styleguide]
github_repository.managed["dotfiles"]: Refreshing state... [id=dotfiles]
github_repository.managed["homelab"]: Refreshing state... [id=homelab]
github_repository.managed["puzzles"]: Refreshing state... [id=puzzles]
github_repository.managed["tools"]: Refreshing state... [id=tools]
github_repository.managed["infrastructure"]: Refreshing state... [id=infrastructure]
github_repository.managed["docs"]: Refreshing state... [id=docs]
github_repository.managed["passgen"]: Refreshing state... [id=passgen]
github_repository.managed["tuile"]: Refreshing state... [id=tuile]
github_repository.managed["vale-languagetool"]: Refreshing state... [id=vale-languagetool]
data.github_user.self: Read complete after 2s [id=13631471]
github_actions_secret.tailscale_oauth_client_id: Refreshing state... [id=infrastructure:TAILSCALE_OAUTH_CLIENT_ID]
github_actions_secret.github_app_private_key: Refreshing state... [id=infrastructure:TF_GITHUB_APP_PRIVATE_KEY]
github_actions_secret.github_app_installation_id: Refreshing state... [id=infrastructure:TF_GITHUB_APP_INSTALLATION_ID]
github_repository_environment.homelab_apply: Refreshing state... [id=infrastructure:homelab-apply]
github_repository_vulnerability_alerts.alerts["infrastructure"]: Refreshing state... [id=1234973546]
github_actions_secret.github_app_id: Refreshing state... [id=infrastructure:TF_GITHUB_APP_ID]
github_repository_vulnerability_alerts.alerts["homelab"]: Refreshing state... [id=1235102549]
github_repository_vulnerability_alerts.alerts["puzzles"]: Refreshing state... [id=1221351905]
github_actions_secret.aws_secret_access_key: Refreshing state... [id=infrastructure:AWS_SECRET_ACCESS_KEY]
github_repository_vulnerability_alerts.alerts["tools"]: Refreshing state... [id=177344790]
github_repository_vulnerability_alerts.alerts["tuile"]: Refreshing state... [id=1209980965]
github_repository_vulnerability_alerts.alerts["styleguide"]: Refreshing state... [id=877056782]
github_repository_vulnerability_alerts.alerts["vale-languagetool"]: Refreshing state... [id=874539266]
github_repository_vulnerability_alerts.alerts["dotfiles"]: Refreshing state... [id=692319991]
github_repository_vulnerability_alerts.alerts["passgen"]: Refreshing state... [id=1007162400]
github_repository_vulnerability_alerts.alerts["docs"]: Refreshing state... [id=1213739034]
github_actions_secret.tailscale_oauth_client_secret: Refreshing state... [id=infrastructure:TAILSCALE_OAUTH_CLIENT_SECRET]
github_actions_secret.aws_access_key_id: Refreshing state... [id=infrastructure:AWS_ACCESS_KEY_ID]
github_branch_protection.main["tools"]: Refreshing state... [id=BPR_kwDOCpIRFs4CjUwo]
github_branch_protection.main["dotfiles"]: Refreshing state... [id=BPR_kwDOKUP2984EclBF]
github_branch_protection.main["vale-languagetool"]: Refreshing state... [id=BPR_kwDONCBpAs4Ek1LO]
github_branch_protection.main["infrastructure"]: Refreshing state... [id=BPR_kwDOSZwzas4Ek1LQ]
github_branch_protection.main["passgen"]: Refreshing state... [id=BPR_kwDOPAgUIM4Ek1Lp]
github_branch_protection.main["homelab"]: Refreshing state... [id=BPR_kwDOSZ4rVc4Ek1bm]
github_branch_protection.main["tuile"]: Refreshing state... [id=BPR_kwDOSB7YJc4Ek1LN]
github_branch_protection.main["docs"]: Refreshing state... [id=BPR_kwDOSFgwGs4Ek1Ll]
github_branch_protection.main["puzzles"]: Refreshing state... [id=BPR_kwDOSMxZ4c4Ek1Lo]
github_branch_protection.main["styleguide"]: Refreshing state... [id=BPR_kwDONEbTDs4Ek1Lj]

OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  ~ update in-place

OpenTofu will perform the following actions:

  # github_actions_secret.aws_access_key_id will be updated in-place
  ~ resource "github_actions_secret" "aws_access_key_id" {
        id                = "infrastructure:AWS_ACCESS_KEY_ID"
      - plaintext_value   = (sensitive value) -> null
      + value             = (sensitive value)
        # (7 unchanged attributes hidden)
    }

  # github_actions_secret.aws_secret_access_key will be updated in-place
  ~ resource "github_actions_secret" "aws_secret_access_key" {
        id                = "infrastructure:AWS_SECRET_ACCESS_KEY"
      - plaintext_value   = (sensitive value) -> null
      + value             = (sensitive value)
        # (7 unchanged attributes hidden)
    }

  # github_actions_secret.github_app_id will be updated in-place
  ~ resource "github_actions_secret" "github_app_id" {
        id                = "infrastructure:TF_GITHUB_APP_ID"
      - plaintext_value   = (sensitive value) -> null
      + value             = (sensitive value)
        # (7 unchanged attributes hidden)
    }

  # github_actions_secret.github_app_installation_id will be updated in-place
  ~ resource "github_actions_secret" "github_app_installation_id" {
        id                = "infrastructure:TF_GITHUB_APP_INSTALLATION_ID"
      - plaintext_value   = (sensitive value) -> null
      + value             = (sensitive value)
        # (7 unchanged attributes hidden)
    }

  # github_actions_secret.github_app_private_key will be updated in-place
  ~ resource "github_actions_secret" "github_app_private_key" {
        id                = "infrastructure:TF_GITHUB_APP_PRIVATE_KEY"
      - plaintext_value   = (sensitive value) -> null
      + value             = (sensitive value)
        # (7 unchanged attributes hidden)
    }

  # github_actions_secret.tailscale_oauth_client_id will be updated in-place
  ~ resource "github_actions_secret" "tailscale_oauth_client_id" {
        id                = "infrastructure:TAILSCALE_OAUTH_CLIENT_ID"
      - plaintext_value   = (sensitive value) -> null
      + value             = (sensitive value)
        # (7 unchanged attributes hidden)
    }

  # github_actions_secret.tailscale_oauth_client_secret will be updated in-place
  ~ resource "github_actions_secret" "tailscale_oauth_client_secret" {
        id                = "infrastructure:TAILSCALE_OAUTH_CLIENT_SECRET"
      - plaintext_value   = (sensitive value) -> null
      + value             = (sensitive value)
        # (7 unchanged attributes hidden)
    }

Plan: 0 to add, 7 to change, 0 to destroy.

Warning: Deprecated attribute

  on github.tf line 32, in resource "github_repository" "managed":
  32:     ignore_changes = [vulnerability_alerts]

The attribute "vulnerability_alerts" is deprecated. Refer to the provider
documentation for details.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    tofu apply "tfplan"