I've managed to solve Error1 and Error3 in one go by following this:
https://developer.apple.com/forums/thread/733942
specifically:
Add the following to your .entitlements:
A com.apple.application-identifier property whose value is your App ID
A com.apple.developer.team-identifier property whose value is your Team ID
both ARM and Intel are now victims of Error2, which I suppose is reassuring. Still not sure where com.apple.quarantine extended file attributes are coming from.
Topic:
Code Signing
SubTopic:
General