The executable was signed with invalid entitlements.
The entitlements specified in your application’s Code Signing Entitlements file do not match those specif
Had this issue. My main app and extension belonged to the same app group id correctly, but there was also one more app ID not in my project that shared said app group id. I had to remove this last app ID's association with the app group.