CI: provide new required secret for S3 endpoint and bucket name