Having communicated further, it looks like the problem is similar to one previously discussed here:
In short, try omitting --options runtime from OTHER_CODE_SIGN_FLAGS, and enabling the hardened runtime using the dedicated option in the Projucer if necessary.
