If we manually flag a group of IPs under our demo account, will they be flagged in the entire system? And will they be flagged when the system goes live?

Yes, even though Sandbox and Production have separate databases, flagged IPs with shared attributes in Sandbox will also appear as flagged in Production and everyone in our network. However, you will need to confirm the action before the flags are applied in Production.