IPV6 PCP UPnP IGD v2 is missing, give me best ideas for easy dynamic ipv6 firewall pinholing

I was thinking of using local adguard dns server with AAAA entries, then update those entries from docker container with its own GUA, then somehow make a script for mikrotik to get that GUA from that dns entry and update a firewall rule.

But still leaves an issue how to let an app itself open pin holes via pcp upnp igd v2