I've started using domains like fasterthanli.me.snug.blog which I control and resolve to 127.0.0.1 when developing my site but... of course that's an insecure origin, so the clipboard doesn't work.

believe it or not the path of least resistance was serving (self-signed) TLS 🙃