that's definitely a problem we have too, is that we have to time when we active a refresh, and running a post-refresh sdf script, which disables certain jobs, and resets certain values. There are some 3rd party bundles that are problems that we have to manually update so they're not pushing out to production. Most of our in-house scripts check the Environment == Sandbox. But I dig this idea of if-it-should-run-in-sandbox.