You’re pretty much fine with your choices !
Since I manage a few vps, I run these in order:
apt-get -y update && apt-get -y upgrade
apt-get -y autoremove && apt-get -y autoclean
A reboot as you stated finalize everything. This checkup every few weeks is good enough.
I don’t recommand using the ./launcher cleanup app right after a rebuild tho, because if there’s an issue, it can be helpful to go back quickly to the previous rebuild using ./launcher restart app. A few days later, it’s fine.