I was able to solve the "self-update" problem with Quinn's advice regarding codesigning with designated requirements.
AssociatedBundleIdentifiers still doesn't work as documented, so I have opened a feedback ticket: FB16563823.
Thanks for the help Quinn!
Topic:
App & System Services
SubTopic:
Networking
Tags: