All right Peter — let’s make this boringly reliable, the way infrastructure should be.
There are three sane ways to keep per-app light mode enforced on modern macOS. They differ mainly in how “enterprise” you want to get.
I’ll walk from simplest → most robust, with opinions included at no extra charge.
Option 1 — Login script (best balance of power vs simplicity)