The way I described it above will require at least two restarts, unfortunately, so be prepared to wait (layering is safe but as slow as getting a new system update).

You might be able to chain the local file with the dependencies in the repos, like rpm-ostree install dep1 dep2 /path/to/your/file.rpm to save a restart and only create the one new rollback state in the boot menu.