Sorry, writing a response during the night in a foreign language was a bad idea...
I mean, I have a "container" bundle and a "nested" bundle which I put in "container".app/Contents/MacOS.
The container application launches the nested one as an agent.
I tested launching via launchctl and Service Management framework.
It turns out that I have to put "Apple Events" entitlements for both the container and the nested app and update their Info.plists accordingly (put there Privacy - AppleEvents Sending Usage Description), even though only the nested app deals with Scripting Bridge.
When a nested app reaches the execution point where it invokes Scripting Bridge API a corresponding popup from the system appears to get the user verdict (allow/deny access). However, the message in this popup states that Automation permission is requested by a container app that doesn't deal with Apple Events and acts as a simple launcher for the nested one.
It turns out that I didn't need AssociatedBundleIdentifiers in the nested app's Info.plist (so far, I don't know whether it could a problem for notarization).