nixos/renovate: Fix ShellCheck issue (#373131)

nixos/modules/services/misc/renovate.nix

@@ -138,9 +138,10 @@ in
 
       script = ''
         ${lib.concatStringsSep "\n" (
-          builtins.map (name: "export ${name}=$(systemd-creds cat 'SECRET-${name}')") (
-            lib.attrNames cfg.credentials
-          )
+          builtins.map (name: ''
+            ${name}="$(systemd-creds cat 'SECRET-${name}')"
+            export ${name}
+          '') (lib.attrNames cfg.credentials)
         )}
         exec ${lib.escapeShellArg (lib.getExe cfg.package)}
       '';

nixos/tests/renovate.nix

@@ -31,6 +31,8 @@ import ./make-test-python.nix (
           enable = true;
           settings.server.HTTP_PORT = 3000;
         };
+        # Uncomment the next line to lint service scripts (Note: breaks VM startup; see #373166)
+        #systemd.enableStrictShellChecks = true;
       };
 
     testScript = ''