[Pagure] Use correct staging env variable

Also change the client_secrets.json permissions to match pagure.cfg.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>

roles/pagure/tasks/main.yml

@@ -351,7 +351,7 @@
 - name: Install client_secrets for ipsilon
   template: src=client_secrets.json
             dest=/etc/pagure
-            owner=root group=root mode=0600
+            owner=git group=postfix mode=0640
   tags:
   - config
   - web

roles/pagure/templates/pagure.cfg

@@ -196,7 +196,7 @@ DISABLED_PLUGINS = ['IRC']
 # Specify which authentication method to use, defaults to `fas` can be or
 # `local`
 # Default: ``fas``.
-{% if env == 'staging' %}
+{% if env == 'pagure-staging' %}
 PAGURE_AUTH = 'oidc'
 OIDC_CLIENT_SECRETS = "/etc/pagure/client_secrets.json"
 {% else %}