Replying to my own thread after ~1.5 year, with a more on-topic solution, possibly useful to others:
pkg_comp is, to a large extent, the sort of poudriere-like automation tool I was looking for, combining a serious pkg_install(5) abstraction, with good dependency handling and with the convenience of hosting a local custom repo in a secure chroot-based sandbox (see also
sandboxctl)