Many private trackers, and even a few public ones, have a request forum. The private ones reward users that fill these requests, so they are often effective.
There are some very accessible private trackers (sometimes referred to as semi-private) that meet these requirements. Once you get set up, they can be very set-and-forget. Just avoid the forums.
Licensing and activation are separate, and only loosely related. If you are at anything resembling a large org, they don’t even use the HWID or OEM key- they will be using an internal KMS server.
It really sounds like you have way more permissions than you should have on a work device. You should’ve hit a wall even attempting to install Win11 (I can confirm that my work blocks this very effectively). I also question why you would want to do that at all. I’m also not sure you needed to do anything to activate- I believe 10 and 11 use the exact same HWID/keys/etc