👷 ci(build): enforce sonar host url secret presence

- update HOST_URL to require SONAR_HOST_URL secret for enhanced security configuration
- improve error handling by ensuring critical secrets are set

.forgejo/workflows/build.yml

@@ -34,7 +34,7 @@ jobs:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           SONAR_PROJECT_KEY: ${{ secrets.SONAR_PROJECT_KEY }}
         run: |
-          HOST_URL=${SONAR_HOST_URL:-https://sonata.cyber77.de}
+          HOST_URL=${SONAR_HOST_URL:?SONAR_HOST_URL secret not set}
           PROJECT_KEY="${SONAR_PROJECT_KEY}"
           if [ -z "$PROJECT_KEY" ] && [ -f sonar-project.properties ]; then
             PROJECT_KEY=$(grep -E '^sonar.projectKey=' sonar-project.properties | cut -d= -f2 | tr -d '\r')