add store as git credential helper

home/modules/git.nix

@@ -1,4 +1,8 @@
-{ config, lib, ... }:
+{
+  config,
+  lib,
+  ...
+}:
 {
   options = {
     youthlic.programs.git = {
@@ -41,6 +45,9 @@
           git_protocol = "ssh";
         };
       };
+      sops.secrets."gitea" = {
+        mode = "0440";
+      };
       programs.git = lib.mkMerge [
         {
           enable = true;
@@ -49,6 +56,11 @@
           delta = {
             enable = true;
           };
+          extraConfig = {
+            credential = {
+              helper = "store --file=${config.sops.secrets."gitea".path}";
+            };
+          };
         }
         (lib.mkIf (cfg.signKey != null) {
           signing = {