> So how do you as a small business owner even know whether the agency you pay 10k is giving you good and maintainable code?

Like in any other industry: you network and connect and consult with people before knocking on any random agency door.

I don't ring a random plumber, I ask a friend or two if they know someone who's reliable.

Also, you need to add maintenance to your budget.