I just documented my setup, and the reasoning for it. Covers repo-native tooling, sandboxing, request proxying etc.

Perhaps of interest?

https://epiq.sh/blog/repo-native-tooling-for-sandboxes