fix: ChartMuseum auth failure - use shell substitution for string param

The `chartMuseumUsername` parameter is a `string` type in Dagger, but was
passed as `env:CHARTMUSEUM_USERNAME` in CI. The `env:` prefix only works
for `Secret` type parameters - for strings, it's passed literally, causing
the curl command to use "env:CHARTMUSEUM_USERNAME" as the username instead
of the actual value. Changed to shell variable substitution `$CHARTMUSEUM_USERNAME`.

Also quotes curl auth variables and updates renovate test import paths.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: claude

.dagger/src/homelab-ci-steps.ts

@@ -250,7 +250,7 @@ export async function homelabHelmPublishBuilt(
         .withExec([
           "sh",
           "-c",
-          String.raw`curl -s -w '\n%{http_code}' -u $CHARTMUSEUM_USERNAME:$CHARTMUSEUM_PASSWORD --data-binary @${chartFile} ${repo}/api/charts > /tmp/result.txt 2>&1`,
+          String.raw`curl -s -w '\n%{http_code}' -u "$CHARTMUSEUM_USERNAME:$CHARTMUSEUM_PASSWORD" --data-binary @${chartFile} ${repo}/api/charts > /tmp/result.txt 2>&1`,
         ]);
 
       const result = await container.file("/tmp/result.txt").contents();

.dagger/test/homelab-test-renovate-regex.ts

@@ -1,8 +1,8 @@
 #!/usr/bin/env -S bun
 
 import { z } from "zod";
-import cdk8sVersions from "@homelab/cdk8s/src/versions";
-import daggerVersions from "../src/lib/versions.ts";
+import cdk8sVersions from "../../packages/homelab/src/cdk8s/src/versions";
+import daggerVersions from "../src/lib-versions.ts";
 
 /**
  * Test script to validate that versions.ts files have properly formatted
@@ -176,9 +176,9 @@ async function parseVersionsFile(
 
 function getVersionsObject(filePath: string): Record<string, string> {
   // Use static imports to get the versions object
-  if (filePath === "src/cdk8s/src/versions.ts") {
+  if (filePath === "packages/homelab/src/cdk8s/src/versions.ts") {
     return cdk8sVersions;
-  } else if (filePath === ".dagger/src/versions.ts") {
+  } else if (filePath === ".dagger/src/lib-versions.ts") {
     return daggerVersions;
   } else {
     throw new Error(`Unknown versions file: ${filePath}`);
@@ -200,7 +200,7 @@ async function main() {
   const renovateRegexes = await getRenovateRegexes();
   console.log(`📋 Using ${String(renovateRegexes.length)} regex pattern(s)`);
 
-  const versionFiles = ["src/cdk8s/src/versions.ts", ".dagger/src/versions.ts"];
+  const versionFiles = ["packages/homelab/src/cdk8s/src/versions.ts", ".dagger/src/lib-versions.ts"];
 
   let totalErrors = 0;
   let totalWarnings = 0;

.github/workflows/ci.yml

@@ -151,7 +151,7 @@ jobs:
               --registry-password=env:GITHUB_TOKEN
               --commit-back-token=env:GITHUB_TOKEN
               --argocd-token=env:ARGOCD_TOKEN
-              --chart-museum-username=env:CHARTMUSEUM_USERNAME
+              --chart-museum-username="$CHARTMUSEUM_USERNAME"
               --chart-museum-password=env:CHARTMUSEUM_PASSWORD
               --cloudflare-api-token=env:CLOUDFLARE_API_TOKEN
               --cloudflare-account-id=env:CLOUDFLARE_ACCOUNT_ID