OK, my approach was way to complicated, when it's indeed so easy!
I thought, giving each Firefox-profile a separate KPH-Connector key, each profile would now also only see it's own bunch of passwords in the single shared KeePass-DB… but of course, that's not how KeePass works, so following your advice all is now working as required – THANKS ANDY, GREAT WORK!