Okay, if anyone comes across this again... the solution seems to be that all extensions bundled with your app (notification, widgets, etc.) all need to also have the entitlement enabled for them. Feels like there could have been a decent error, or something documenting this but, here we are...

Did anyone find a solution for this?