X86 Docker - container and zone

Ciao!

I have an openwrt installation on x86 with docker.
It's a basic installation on which I added a "guest" network as per the guide:
https://openwrt.org/docs/guide-user/network/wifi/guestwifi/configuration_webinterface
Guest network is isolated from the LAN network

The containers are deployed and communicating correctly according to the changes suggested by @rolan here:

The next step is to create an "IOT" network or a "DVR Recording" network similar to the "guest" network as they are isolated from the rest.

Currently all containers are automatically deployed in bridge networks (default docker network) in the LAN zone.
I would like to have some suggestions on:
1 - how can I deploy a container on the "guest" / "IOT" / "DVR Recording" zone
2 - how can I reach a single container from the LAN zone to the "guest" / "IOT" / "DVR Recording" zone

as you have understood, the purpose is to isolate potentially insecure devices from the rest of the system.

just to add more info about zone as per luci firewall: