Clarify usage of secrets in docs

[6543]

as per #4096 (comment)

[woodpecker-bot]

Deployment of preview was successful: https://woodpecker-ci-woodpecker-pr-4099.surge.sh

[pat-s]

Thanks for the follow-up to my previous comment.

Besides the inline comments (which should be ported to the 2.7 docs if accepted), I am still missing a section which explains in detail:

• why environment: has been removed from all plugins (and starting with which version)
• how using secrets via a plugin setting option is different/more secure

[lafriks]

imho droping secrets and having only from_secret would make all less complicated 😅

[6543]

we depricated them and we could at least remove them from the docs ...

[pat-s]

@6543 Do you still plan to address the points in my last review comment?

[6543]

Well as they are blocking yes ... when i have time

[6543]

@pat-s

[6543]

Deployment of preview was successful: https://woodpecker-ci-woodpecker-pr-4099.surge.sh

[pat-s]

I'll take another look soon!

[pat-s]

Suggested change

	- name: 'some commands using secrets'
	image: bash
	commands:
	- env | grep TOKEN
	+ environment:
	+ TOKEN_ENV:
	+ from_secret: secret_token
	- name: 'step name'
	image: registry/repo/image:tag
	commands:
	- env | grep TOKEN
	+ environment:
	+ TOKEN:
	+ from_secret: secret_token

[6543]

can not apply :/

[pat-s]

Superseeded by #4644.