You should install all software in VM: fedora-37, and then you should create new “apps” machines based on fedora-37 template, and in the template-based machines you should run software previously installed in fedora-37 template.
You can, that’s not recommended because it can compromise the system. If the software is not bundled with anything wrong then it’s safe to run in dom0. For rice, the user will need to install rofi and polybar to dom0 since it needs to appear on the desktop and get information about qubes and more.
Other than that, the remaining software need to be installed in a TemplateVM/StandaloneVM.