I use local.settings.json + func core tools to control and publish environment variables to my Azure Function Apps. Because of the use of Key Vault References, there are no secrets in my local.settings.json files.
It would be nice to use this Azure Function Action and pass a command to update environment variables using local.settings.json.