Just brain storming here:

You could expose a bare git repo on the server with a git hook that runs Docker compose up on push.

You could also have GitHub actions ssh in and run git pull && docker compose up on push to main.

The right to use adblockers? This is my device. I bought it. I have ownership. I decide what and who gets to run code on it. Write what you want in lawyerspeak in contracts designed to prevent me from reading and/or understanding it. You can’t redefine ownership