ci(github-actions): use only .github/ for consistency, replace host secrets with vars

.github/workflows/build.yml

@@ -43,9 +43,9 @@ jobs:
         if: vars.SONAR_ENABLED == 'true'
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
-          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
+          SONAR_HOST_URL: ${{ vars.SONAR_HOST_URL }}
         run: ./mvnw org.sonarsource.scanner.maven:sonar-maven-plugin:sonar -Dsonar.projectKey=quarkus-commons -Dsonar.projectName='quarkus-commons' -Dsonar.coverage.jacoco.xmlReportPaths=../**/target/jacoco-report/jacoco.xml
 
       - name: Upload libs to Gitea Maven Registry
-        if: gitea.ref == 'refs/heads/main'
+        if: github.ref == 'refs/heads/main'
         run: ./mvnw deploy -Dmaven.test.skip=true -Dmaven.javadoc.skip=true