fix: Path for secrets injection

scripts/ci/ansible/deploy-production-runner.yml

@@ -133,6 +133,16 @@
         groups: docker
         append: true
 
+    - name: Configure passwordless sudo for act_runner
+      copy:
+        dest: /etc/sudoers.d/act_runner
+        content: |
+          # Allow act_runner to run commands without password for CI/CD operations
+          # This is required because Gitea Actions runners don't have a TTY
+          act_runner ALL=(ALL) NOPASSWD: ALL
+        mode: '0440'
+        validate: 'visudo -cf %s'
+
     - name: Create act_runner config directory
       file:
         path: /etc/act_runner