build: move ci input vars to env

Author: aliziel

.github/workflows/ci.yaml

@@ -35,14 +35,16 @@ jobs:
           role-to-assume: ${{ secrets.AWS_OIDC_ROLE }}
       - name: Provision TF
         uses: op5dev/tf-via-pr@v13
+        env:
+          TF_VAR_cluster_ci_access_role_arn: ${{ secrets.AWS_OIDC_ROLE }}
+          TF_VAR_cluster_admin_access_role_arns: ${{ toJSON(secrets.CLUSTER_ADMIN_ACCESS_ROLE_ARNS) }}
         with:
           command: ${{ github.event_name == 'push' && 'apply' || 'plan' }}
           tool: tofu
           working-directory: terraform
           validate: true
           format: true
           arg-var-file: ${{ env.VAR_FILE }}
-          arg-var: cluster_ci_access_role_arn=${{ secrets.AWS_OIDC_ROLE }},cluster_admin_access_role_arns=${{ toJSON(secrets.CLUSTER_ADMIN_ACCESS_ROLE_ARNS) }}
           label-pr: false
       - name: Get TF Outputs
         run: |