you will need access to cloud-managed distribution certs as well, in user and permissions

you need to add the missing type to the command -t ios. --> xcrun altool --upload-app -t ios