maintenance/metis: read optional ssh pubkeys from secret env

services/maintenance/metis-deployment.yaml

@@ -42,6 +42,18 @@ spec:
                   name: metis-runtime
                   key: k3s_token
                   optional: true
+            - name: METIS_SSH_KEY_BRAD
+              valueFrom:
+                secretKeyRef:
+                  name: metis-ssh-keys
+                  key: brad_pub
+                  optional: true
+            - name: METIS_SSH_KEY_HECATE_TETHYS
+              valueFrom:
+                secretKeyRef:
+                  name: metis-ssh-keys
+                  key: hecate_tethys_pub
+                  optional: true
           ports:
             - name: http
               containerPort: 8080