Gold95 most recommended VPN apps here are IVPN and Mullvad, and ProtonVPN to some extent.
I'm using IVPN and Mullvad on my 2 GOS devices, and both support local network bypass and split tunneling (per app bypass), so your first two points are covered. You'll have to use their official, Open Source apps for this. As for the third point, you might be able to automate this via tasker but I assume it's a workaround solution for your problem in case the first two don't work anyway.
I assume Proton and many other popular VPN providers offer these features as well (in case your subscription is not running out any time soon, check the settings in the official VPN app and you might be lucky).