if you are using Heroku to deploy your app, then set the environmental variable of jwt secret there.
I believe everything will work fine
As for the upgrades you only need to change the version number in your package.json file. you can find more details in the upgrade guide
but if you need to migrate then check out this documentation