fix(deploy): inconsistent data, unpad failed error in bundle apply/render

Fix error `Error: pull bundle: error decoding secrets: error loading secret files data: error decoding secret/secret-config.txt: decryption failed: check encryption key and data: inconsistent data, unpad failed`

Signed-off-by: Ilya Lesikov <ilya@lesikov.com>

Author: ilya-lesikov

cmd/werf/bundle/apply/apply.go

@@ -195,6 +195,12 @@ func runApply(ctx context.Context) error {
 		return fmt.Errorf("get service values: %w", err)
 	}
 
+	secretWorkDir, err := os.Getwd()
+	if err != nil {
+		return fmt.Errorf("get current working directory: %w", err)
+	}
+	secrets.SecretsWorkingDir = secretWorkDir
+
 	if err := bundles.Pull(ctx, fmt.Sprintf("%s:%s", repoAddress, cmdData.Tag), bundlePath, bundlesRegistryClient); err != nil {
 		return fmt.Errorf("pull bundle: %w", err)
 	}
@@ -246,6 +252,7 @@ func runApply(ctx context.Context) error {
 		RollbackGraphSave:            common.GetRollbackGraphPath(&commonCmdData) != "",
 		SecretKeyIgnore:              *commonCmdData.IgnoreSecretKey,
 		SecretValuesPaths:            common.GetSecretValues(&commonCmdData),
+		SecretWorkDir:                secretWorkDir,
 		SubNotes:                     *commonCmdData.RenderSubchartNotes,
 		TrackCreationTimeout:         time.Duration(cmdData.Timeout) * time.Second,
 		TrackDeletionTimeout:         time.Duration(cmdData.Timeout) * time.Second,

cmd/werf/bundle/render/render.go

@@ -177,6 +177,12 @@ func runRender(ctx context.Context) error {
 		return fmt.Errorf("get service values: %w", err)
 	}
 
+	secretWorkDir, err := os.Getwd()
+	if err != nil {
+		return fmt.Errorf("get current working directory: %w", err)
+	}
+	secrets.SecretsWorkingDir = secretWorkDir
+
 	var bundlePath string
 	if isLocalBundle {
 		bundlePath = cmdData.BundleDir
@@ -239,6 +245,7 @@ func runRender(ctx context.Context) error {
 		ReleaseStorageDriver:         action.ReleaseStorageDriver(os.Getenv("HELM_DRIVER")),
 		SecretKeyIgnore:              *commonCmdData.IgnoreSecretKey,
 		SecretValuesPaths:            common.GetSecretValues(&commonCmdData),
+		SecretWorkDir:                secretWorkDir,
 		ShowCRDs:                     cmdData.IncludeCRDs,
 		ShowOnlyFiles:                append(util.PredefinedValuesByEnvNamePrefix("WERF_SHOW_ONLY"), cmdData.ShowOnly...),
 		ValuesFileSets:               common.GetSetFile(&commonCmdData),