Set a one-time setup token first:wrangler secret put SETUP_TOKEN(or SETUP_TOKEN=… in .dev.vars locally), then reload.
wrangler secret put SETUP_TOKEN
SETUP_TOKEN=…
.dev.vars