Yeah, that’s what I ended up doing because then the host machine creates the necessary files and we don’t have to install WP as root via WP CLI.

Wasn’t sure if the WordPress develop repo requires any build steps (now that Gutenberg is there) so I defined the package in composer.json.