I'm a fan of Firecracker, but your use case might be a better fit for plain old containers because the tooling is currently more mature. If it's the isolation that attracts you to Firecracker, gVisor is an option: https://gvisor.dev/.
Thank you for linking gVisor, went through the docs real quick and it looks very promising for my use case.