Cloudflare Workers Paid Plan Workers for Platforms subscription Advanced Certificate Manager (needed when you map a first-level subdomain such as abc.xyz.com so Cloudflare can issue the required wildcard certificate for preview apps on *.abc.xyz.com) asks everything, gives a single peanut