use rbac for leases

.gitea/workflows/build-and-publish.yaml

@@ -21,6 +21,13 @@ jobs:
       - uses: DeterminateSystems/flake-checker-action@main
         with:
           flake-lock-path: ./build/flake.lock
+
+      - name: Setup Attic cache
+        uses: ryanccn/attic-action@v0
+        with:
+          endpoint: ${{ secrets.ATTIC_ENDPOINT }}
+          cache: ${{ secrets.ATTIC_CACHE }}
+          token: ${{ secrets.ATTIC_TOKEN }}
             
       - name: Build Docker Image via Nix Flake
         run: |