use netrc approach for git push

.woodpecker.yml

@@ -24,10 +24,12 @@ steps:
       GIT_TOKEN:
         from_secret: git_push_token
     commands:
-      - 'echo "token len=$(echo -n $GIT_TOKEN | wc -c)"'
+      - 'cat ~/.netrc 2>/dev/null && echo "=== netrc exists ===" || echo "=== no netrc ==="'
+      - 'git config --list 2>/dev/null | grep -i cred || echo "no credential config"'
+      - 'printf "machine git.mikhailkilin.ru\nlogin killingdruid\npassword %s\n" "$GIT_TOKEN" > ~/.netrc'
+      - 'chmod 600 ~/.netrc'
       - 'sed -i "s#image: git.mikhailkilin.ru/killingdruid/bcard:.*#image: git.mikhailkilin.ru/killingdruid/bcard:${CI_COMMIT_SHA}#" k8s/bcard.yaml'
       - 'git config user.email "woodpecker@ci"'
       - 'git config user.name "Woodpecker CI"'
-      - 'git remote set-url origin "https://killingdruid:${GIT_TOKEN}@git.mikhailkilin.ru/killingdruid/bcard.git"'
       - 'git add k8s/bcard.yaml'
       - 'git diff --cached --quiet && echo "No changes" || (git commit -m "[CI SKIP] deploy ${CI_COMMIT_SHA}" && git push origin HEAD:main)'