Is this the correct way or should I change it?
You can pass in the first proxy's address as the parameter. For reference, see Example on how to use ERC20 token in another contract
Also, if I wish to split the deployment, what's the equivalent for
<Contract>.attach
for upgradeable contracts?
<Contract>.attach(address)
can be used with the proxy address that was deployed.