If you can afford to block at L7, all outgoing http requests from Cloudflare workers have a HTTP header identifying them as such.

Link: https://developers.cloudflare.com/fundamentals/get-started/r...

cf-worker: example.com