I wonder if this (or at least part of it maybe) could be a good use case for something like the proposal here: Proposal: overrides for installers (there are other related proposals around that might be a good fit as well, some are linked).
I agree that there is a hole to fill in this area: settings that should not be pushed to the source code repository but should override the project’s settings.