We won!
Tried 3 approaches and I will document them here for folks who face similar predicament.
Approach 1 - WSL - was no go. It needs some different x-server. I naively thought that I will be able to run a vncserver and then from Windows run the vncviever and connect to the localhost to get graphial ui. Also WSL is pretty limited in what you can do, it does not even let you use ssh to open dynamic ports incase you want to run socks proxy. So WSL no go. One down.
Approach 2 - hypervisor. Installed Debian in a virtal machice. This option is feasible however the available resources are limited as windows is always running in the background. No joy.
Approach 3 - It was clear that I would need to use a DAAS. Here I had 2 options -
1. I can use my existing Thinkpad, put it behind a ddns to get a hostname to which I can connect from windows. However bandwidth of my home connection is not consistent.
2. Use a DAAS solution. This was the best option.
To make it work I had to :-
* From windows surface book fire up a Debian virtual machine
* create a dynamic reverse socks proxy via ssh into my DAAS. This is crucial as without the proxy I can not access their precious internal resources.
* sftp the backup of my apps .config to the DAAS
* Create a separate work profile in firefox in DAAS and configure it to use the ssh proxy.
* user syncthing to sync the work folder between windows and DAAS
Benefits -
* Get to work the way I am used to with all my keybinds, aliases, service units and tweaks.
* I can use my personal firefox profile to use internet without being monitored by their network. Now I can finally start to work.
* I do not have to lug the shitbook anywhere. I can access DAAS from any dumb terminal.
If the bitch boss says no to my setup I will cross him off my christmas presents list and quit on the spot

Still have not figured out how to replace shitbook's keyboard with Thinkpads. Not yet but I will get there.