See https://cloud.google.com/secret-manager/
I recommend this community-maintained FAQ on Cloud Run:
https://github.com/ahmetb/cloud-run-faq