WeatherKit native weather(for:) fails with WDSJWTAuthenticatorServiceListener Code=2 despite App Services + Capabilities enabled

Native WeatherKit fails for our app on both development and TestFlight distribution builds, with the WeatherKit service enabled.

Team ID: YCF2TGZAX8 Bundle ID: org.walktalkmeditate.pilgrim

Call: try await WeatherKit.WeatherService.shared.weather(for: location, including: .current)

Error (immediate, every call): Error Domain=WeatherDaemon.WDSJWTAuthenticatorServiceListener.Errors Code=2 "(null)"

What we've verified:

• WeatherKit enabled under BOTH the Capabilities tab AND the App Services tab for this App ID.
• com.apple.developer.weatherkit entitlement confirmed in the signed binary (codesign -d --entitlements).
• Fails identically on (a) Xcode-direct development builds and (b) TestFlight distribution builds.
• Physical device (iPhone SE 3rd gen) signed into iCloud / an Apple Account.
• Survives app delete + reinstall AND a device reboot, on both build types.
• GPS/CoreLocation works fine; only WeatherKit auth fails. Not a timeout or rate-limit.
• First appeared on Xcode 26 beta; never resolved on stable Xcode 26.3 (17C529), iOS 18.x.

This matches the pattern in threads 786126, 810137, 811225, and 789900, where the WeatherKit auth backend hasn't registered/synced the bundle ID for JWT issuance even with App Services on, and Apple resolves it server-side.

Could someone check the backend WeatherKit registration for org.walktalkmeditate.pilgrim? Happy to provide a sysdiagnose. Will also file a Feedback report and add the FB number here.