Match terraform-provider-litellmvaultsecret's release flow so both providers
publish the same way.
- Point the upload at the reachable artifactapi host
(artifactapi.k8s.syd1.au.unkin.net) instead of the unresolvable artifactapi3
- Add kubernetes backend options (serviceAccount + resource requests/limits) to
the package and upload steps
- Make the upload step explicitly depend_on the package step
Woodpecker interpolates ${VERSION} as a CI variable (empty) before the
shell sees it. Use $$ escaping so the shell assignment and references
survive YAML interpolation.
unkinben