Hi @ankit, thanks for writing in!
We use Heroku pipelines. Our standard practice is to use the CB Dashboard deployment as production, and set up a separate pipeline for staging (auto-deployed from your master branch).
I suggest you follow the pull request git workflow and test all merged pull requests on staging before deploying them using the CB Dashboard.
SSL is provided by Heroku automatically, both for CB domains and custom domains - just follow the instructions to correctly set the CNAME records when adding a custom doain.
If you let me know the app id I can configure the staging pipeline for you.