[GITEA] do not display secrets when actions is disabled on a repo

Fixes: https://codeberg.org/forgejo/forgejo/issues/938

Author: earl-warren

templates/repo/settings/navbar.tmpl

@@ -27,7 +27,7 @@
 		<a class="{{if .PageIsSettingsKeys}}active {{end}}item" href="{{.RepoLink}}/settings/keys">
 			{{.locale.Tr "repo.settings.deploy_keys"}}
 		</a>
-		{{if .EnableActions}}
+		{{if and .EnableActions (not .UnitActionsGlobalDisabled) (.Permission.CanRead $.UnitTypeActions)}}
 		<a class="{{if .PageIsSettingsSecrets}}active {{end}}item" href="{{.RepoLink}}/settings/secrets">
 			{{.locale.Tr "secrets.secrets"}}
 		</a>