Is there a “tell” or sure fire way when we know when we need to use apply() outside of running pulumi up and finding out on resource creation?

Generally if you need to manipulate an output (concat a string, transform to JSON, etc) you will need to use apply. If you're just passing an output from one resource into another, you do not need to use it.

Yes. Thank you.