After spending another 3 hours investigating, I just tried to post about this separately with some more context...
Topic:
Code Signing
SubTopic:
Notarization
Tags: