Answer
Maintain a defined list of "refresh exclusion" tables covering integration endpoints, credentials, and connection configuration, and clear or replace their contents as part of the clone process — the goal is specifically to prevent a non-production clone from being able to reach production third-party systems, not just to shrink the database.