Sounds above my pay grade. Dunno what CGNAT is, but tailscale could potentially help you make a tunnel to that pi fairly easily.