Grant full disk access to /bin/bash. Yep, as ridiculous as it sounds, that was it for my use case of running a script from launchctl.