fix: use brackets in bootstrap vars

tmpl/.sops.yaml

@@ -2,5 +2,5 @@
 creation_rules:
 - encrypted_regex: '^(data|stringData)$'
   pgp: >-
-    $FLUX_KEY_FP,
-    $PERSONAL_KEY_FP
+    ${FLUX_KEY_FP},
+    ${PERSONAL_KEY_FP}

tmpl/cluster-secrets.yaml

@@ -5,6 +5,6 @@ metadata:
     name: cluster-secrets
     namespace: flux-system
 stringData:
-    SECRET_DOMAIN: $BOOTSTRAP_DOMAIN
-    SECRET_DOMAIN_CERT: $BOOTSTRAP_DOMAIN_CERT
-    SECRET_CLOUDFLARE_EMAIL: $BOOTSTRAP_CLOUDFLARE_EMAIL
+    SECRET_DOMAIN: ${BOOTSTRAP_DOMAIN}
+    SECRET_DOMAIN_CERT: ${BOOTSTRAP_DOMAIN_CERT}
+    SECRET_CLOUDFLARE_EMAIL: ${BOOTSTRAP_CLOUDFLARE_EMAIL}

tmpl/cluster-settings.yaml

@@ -5,5 +5,5 @@ metadata:
   name: cluster-settings
   namespace: flux-system
 data:
-  METALLB_LB_RANGE: $BOOTSTRAP_METALLB_LB_RANGE
-  INGRESS_NGINX_LB: $BOOTSTRAP_INGRESS_NGINX_LB
+  METALLB_LB_RANGE: ${BOOTSTRAP_METALLB_LB_RANGE}
+  INGRESS_NGINX_LB: ${BOOTSTRAP_INGRESS_NGINX_LB}

tmpl/gotk-sync.yaml

@@ -8,7 +8,7 @@ spec:
   interval: 1m0s
   ref:
     branch: main
-  url: $BOOTSTRAP_GITHUB_REPOSITORY
+  url: ${BOOTSTRAP_GITHUB_REPOSITORY}
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
 kind: Kustomization