If you're behind a CDN, your origin can be pure IPv6
Then it doesn't matter whether you use ipv6 or ipv4 with the private 10.0.0.0/8 space either.
Yes! If you're behind ex. cloudflare, you should 100% look at running pure IPv6 with no listening ports, just their service locally.
Plenty. If you expect to access it from IPv4-only networks, you'll have to provide a gateway. Additionally, things like Docker interoperate very poorly with IPv6.
You want an IPv4 address if you want to be reachable by people.