Can we use solutions like OneTrust to get user-level opt-in instead of ATT?

Unfortunately not. Apple's policy makes it clear that the only acceptable opt-in method for device-level ad measurement on iOS is the AppTrackingTransparency prompt.