Hello everyone, I need to pass to my container using cloud run a secret stored in google secret manager. One solution I found is obviously to get the secret in a CI/CD pipeline, store it as an env variable and pass it down to the container as a part of the configuration using Pulumi. Is this the right solution, are there better solutions?