Do you know of a good ready-made implementation of such a proxy? I’ve been looking for one.

GitHub is also a worry in terms of exfiltration. You can’t block pushes to public repos unless you are using GitHub Enterprise Managed Users afaict.