Add dagger token to rgm builds (#68651)

.drone.yml

@@ -4469,6 +4469,8 @@ steps:
   - export GRAFANA_DIR=$$(pwd)
   - cd rgm && ./scripts/drone_publish_main.sh
   environment:
+    _EXPERIMENTAL_DAGGER_CLOUD_TOKEN:
+      from_secret: dagger_token
     DESTINATION:
       from_secret: destination
     GCP_KEY_BASE64:
@@ -4515,6 +4517,8 @@ steps:
   - export GRAFANA_DIR=$$(pwd)
   - cd rgm && ./scripts/drone_publish_tag.sh
   environment:
+    _EXPERIMENTAL_DAGGER_CLOUD_TOKEN:
+      from_secret: dagger_token
     DESTINATION:
       from_secret: destination
     GCP_KEY_BASE64:
@@ -7073,6 +7077,12 @@ get:
 kind: secret
 name: destination
 ---
+get:
+  name: dagger_token
+  path: infra/data/ci/grafana-release-eng/rgm
+kind: secret
+name: dagger_token
+---
 get:
   name: pat
   path: infra/data/ci/github/grafanabot
@@ -7098,6 +7108,6 @@ kind: secret
 name: delivery-bot-app-private-key
 ---
 kind: signature
-hmac: 918dbda2a3a3b0b0c8469778e0f99116e917531a622622739405bbb147a9fb34
+hmac: 168c9251dad68602a8163238cee8d7a58471e518aaedbd6262ae60a72261a34d
 
 ...

scripts/drone/rgm.star

@@ -11,6 +11,7 @@ load(
 load(
     "scripts/drone/vault.star",
     "from_secret",
+    "rgm_dagger_token",
     "rgm_destination",
     "rgm_gcp_key_base64",
     "rgm_github_token",
@@ -20,6 +21,7 @@ rgm_env_secrets = {
     "GCP_KEY_BASE64": from_secret(rgm_gcp_key_base64),
     "DESTINATION": from_secret(rgm_destination),
     "GITHUB_TOKEN": from_secret(rgm_github_token),
+    "_EXPERIMENTAL_DAGGER_CLOUD_TOKEN": from_secret(rgm_dagger_token),
 }
 
 def rgm_build(script = "drone_publish_main.sh"):

scripts/drone/vault.star

@@ -12,6 +12,7 @@ azure_tenant = "azure_tenant"
 rgm_gcp_key_base64 = "gcp_key_base64"
 rgm_destination = "destination"
 rgm_github_token = "github_token"
+rgm_dagger_token = "dagger_token"
 
 def from_secret(secret):
     return {"from_secret": secret}
@@ -133,6 +134,11 @@ def secrets():
             "infra/data/ci/grafana-release-eng/rgm",
             "destination",
         ),
+        vault_secret(
+            rgm_dagger_token,
+            "infra/data/ci/grafana-release-eng/rgm",
+            "dagger_token",
+        ),
         vault_secret(
             rgm_github_token,
             "infra/data/ci/github/grafanabot",