But also, it seems you're using env on a git action ( notice the lower a ), in this case composite.. So, I would say you need to add something like

CLIENTE_ID=${{env.CLIENT_ID}} CLIENT_SECRET=${{env.CLIENT_SECRET}} envsubst < mdm.xml.template > mdm.xml