Docker with tailnet is probably good enough for your usecase.
But there are many tiny details to the whole setup. Like, making sure services start at boot instead of login. And adding isolation to dev resources (I mostly use Postgres and Redis) to avoid agents stepping on each other. There's also things like setting up GitHub Apps so that attribution works well. And then there are the "remote control" features of Claude vs. a persistent tmux I can ssh into. I've could go on, but I think most people will get the point.
I'm actually surprised I don't see more discussion about this from devs.
I recommend "byre" from that list, because I built it. You can inject credentials you want into it, but it can't touch the host. I run all my coding harnesses inside it. At the end of the day, it's a flexible and reusable way of spinning up Docker containers designed for agents.
On a quick skim you have categories: Local, vendor-managed, Hybrid. I am looking for something in-between local and vendor-managed. In a sense, I want the separate box to be the sandbox, rather than have a sandbox on my local machine isolated using a container or VM. That is a bit different of a setup with its own constraints that things like VMs or containers don't directly address.