Allow to set Env variable secrets

(cherry picked from commit 6e6dd6811fe374e846a42c8820830f73d5360e95)

If we want to read a secret stored in an environment variable managed by the Secret Manager, we have to tell Google Run about it at deploy time.