Inject 1Password secrets into GHA