ci: pass deploy secrets through Turbo strict env mode

Turbo 2.x strict env mode stripped CLOUDFLARE_*/ALCHEMY_* (and the CI
state-store opt-out) before the deploy task ran, so CI deploys failed.
Declare them as passThroughEnv on deploy/destroy.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: nathanialhenniges

turbo.json

@@ -21,10 +21,34 @@
       "cache": false
     },
     "deploy": {
-      "cache": false
+      "cache": false,
+      "passThroughEnv": [
+        "CI",
+        "CLOUDFLARE_API_TOKEN",
+        "CLOUDFLARE_ACCOUNT_ID",
+        "CLOUDFLARE_EMAIL",
+        "CLOUDFLARE_API_KEY",
+        "ALCHEMY_PASSWORD",
+        "ALCHEMY_STATE_TOKEN",
+        "ALCHEMY_CI_STATE_STORE_CHECK",
+        "CF_ACCESS_TEAM_DOMAIN",
+        "CF_ACCESS_AUD",
+        "CORS_ORIGIN",
+        "WEB_URL"
+      ]
     },
     "destroy": {
-      "cache": false
+      "cache": false,
+      "passThroughEnv": [
+        "CI",
+        "CLOUDFLARE_API_TOKEN",
+        "CLOUDFLARE_ACCOUNT_ID",
+        "CLOUDFLARE_EMAIL",
+        "CLOUDFLARE_API_KEY",
+        "ALCHEMY_PASSWORD",
+        "ALCHEMY_STATE_TOKEN",
+        "ALCHEMY_CI_STATE_STORE_CHECK"
+      ]
     }
   }
 }