I had blanked on the final chore on iPhone: Settings → General → About → Certificate Trust Settings

@mottzi What's your FB#? I've also submitted a somewhat related FB16484336 asking for a slightly higher silent push limit for Watch than 3x/hr, as workarounds to this issue for apps with complications that need to respond to user iPhone usage actually end up firing off more network activity than if we just had more reasonable silent push limits. transferCurrentComplicationUserInfo would play a key role in avoiding the need for a silent push in some cases.

Only your App Intents claimed in AppShortcuts must be in the main target. Other AppIntents, such as those exposed to users for Shortcuts app scripting, can reside in an xcframework. It is unclear based on documentation (and its known omissions) if there are other limitations, such as AppIntents that may be used for widget buttons, live activities, or other framework interactions.