Can you provide some guidance as to how I can check that the signature is correct and that the above entitlement is applied to the app? Thanks.

Thanks @garrett-davidson , I replied below with more details because of the character limit.

just noticed that I accidentally marked this as accepted answer and can't revert :) still unresolved

@garrett-davidson FB13284888, thank you!

Thanks for the suggestion! This makes sense, however the subsequent request for a security key requires me to tap my yubikey twice. I've submitted FB15987595 which provides more details.