I was trying out cloudflare workers prior to a migration from Vercel but I'm having issues replicating setting up a separate set of secrets for preview builds.
We use convex and on Vercel our preview builds use separate secrets to run convex migrations during builds pointed at our staging env. But it doesn't seem theres a way to accomplish this with preview URLs since previews seem to just use the default env secrets even when pointed at a different env. Vars defined in the wrangler work when using the --env flag for the upload command for non-production env, but secrets always show the default one still.
It seems then you can't use the default github CI/CD integration cloudflare comes with in multi-environment setups from what I can tell. Do you just have to bite the bullet and setup your own actions for this type of workflow that points different branches to deploy to different envs?