5a72399136
Phase 1 — .env provisioning fix: The previous approach tried to write .env directly to /opt/openclaw/data/openclaw/workspace/nexus from inside the runner's job container, but that host path is not mounted there. Fix: write .env from Gitea secrets into the workspace first, then sync it along with the source code via the existing Docker-in-Docker pattern (which can access the host path). Combined the separate '.env creation' and 'sync code' steps into a single atomic 'Sync code + .env to host' step.