Secrets vs text: secrets are hidden after you set them (i.e. for API keys), text is not
Build env and normal env: if you use Workers CI to build your Tanstack app then those vars will be available during build. Normal section env vars are available when your app is running (i.e. when a user sends a request to it)