@wviriya please populate Key Vault secrets and set App Settings in Functions and Static web app at deployment time. The App settings for each Function are documented here.
Note: Only Cosmos key, connection string and AAD Client Secret need to be stored in Key Vault IMO. The rest of the settings can be ordinary App Settings, as they are not secrets. Application Insights iKey is also not a secret.