Shout-out to Firefox Multi-Account Containers, which Just Works (TM) for exactly this use case.