I don’t understand - you want a layer to hide database internals but also a web app that “is only the db itself”?

Bitwarden doesnt rely on the cloud either. You can host it yourself or use another backend like Vaultwarden.