idk how it works on grapheneos. but on normal android i could use work profile for this. and singbox inside the work profile to open a local socks5 proxy, then connecting to it from outside the work profile.