Solid breakdown. The part most people skip is deciding which URL is the source of truth before adding canonicals. I would check Search Console first, then make every variant point to that one URL. I'm affiliated with Scanly, a site-audit tool that runs this check, but even a manual pass catches most of it.