Found this post super interesting. I've personally run into similar, and built a really lightweight k8s operator and claude skill that lets the citizen devs deploy to an eng/IT managed internal k8s cluster. Keeps things safe (non-public), and can update it as they get more advanced.