I haven't looked at the whole thing but I looked at the upgrade LXC script and it just called the respective upgrade/update command inside the shell. I feel like this might be somewhat dangerous as things might need manual intervention?
I mount a network file share into the container and use that to save the completed downloads into a location known by jellyfin (or Plex or your NAS etc)