First deployment classified as Production despite explicit Preview target (Hobby)

It’s expected that the first deployment is automatically production. But you can use --skip-domain to create a staged production deployment hidden from public access with deployment protection.