Thanks to @craftyguy my "iced" tool has seen some nice improvements, notably switching from mkosi-sandbox to bubblewrap.
Iced lets you install and run any software from the Alpine package repos without root, it's designed for use on immutable systems like the new postmarketOS Duranium