Issue #156 fix Central publish 401 in release workflow

Closes #156. setup-java now receives env var names (values via step env) so settings.xml has real Central credentials. Verified by the re-tagged release/2026.08.30 run.

Author: simbo1905

.github/workflows/release-on-tag.yml

@@ -30,10 +30,16 @@ jobs:
           java-version: '21'
           cache: maven
           server-id: central
-          server-username: ${{ secrets.CENTRAL_USERNAME }}
-          server-password: ${{ secrets.CENTRAL_PASSWORD }}
+          # setup-java expects ENVIRONMENT VARIABLE NAMES here, not values;
+          # the values are provided via the env block below (issue #156).
+          server-username: CENTRAL_USERNAME
+          server-password: CENTRAL_PASSWORD
           gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
-          gpg-passphrase: ${{ secrets.GPG_PASSPHRASE }}
+          gpg-passphrase: GPG_PASSPHRASE
+        env:
+          CENTRAL_USERNAME: ${{ secrets.CENTRAL_USERNAME }}
+          CENTRAL_PASSWORD: ${{ secrets.CENTRAL_PASSWORD }}
+          GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
 
       - name: Extract version from tag
         id: version