How are you governing Copilot-assisted app development when citizen developers start building across multiple Power Platform environments?

I am looking at a setup where Copilot is being used to help business users create apps and automate workflows, while IT still needs control over security, environments, and deployment.

Where have you found the right boundary between enabling citizen development and keeping solution ownership and governance with IT?

I am especially interested in how teams structure this once the number of apps starts growing.