Deployment across different tenants best practice

We are planning to try to follow the general recommended approach for deployment. We are planning on 4 Auth0 tenants: dev, test, staging, prod. These tenants will have small differences (a few extra applications in prod, more database connections in staging, etc). The documents detailing deployment using something like bitbucket pipelines keep it fairly simple in the recommended approach. They talk about exporting from one environment (dev) into a tenant.yml file then simply importing this file across each environment through some automated process. My question is what is the best way to accomodate differences across tenants? I know we can do things like substituting strings for prod values, but I mean more actual differences in the tenant’s configuration such as number of apps, database connections, etc.

If there is a doc I missed please point me in the right direction!