JXA sh template and group name fetch - I ended up throwing these away (and just globbing-ish in ~/Library/Group Containers)

ApplicationGroup_JXA.js

let sh = (strs, ...subs) => {
	const q = (s) => `${s}`.match(/^['"].*['"]$/) ? `${s}` : `'${s}'`
	
	return app.doShellScript(
		strs.flatMap((s,i) => subs[i] ? [s.trim(), q(subs[i])] : s.trim() ).join(" ")
	)	
}

let getAppGroup = (appName) =>	sh`codesign --display --entitlements - --xml 2> /dev/null
	 		${Application("System Events").applicationProcesses[appName].applicationFile().posixPath()} 
		| plutil -extract 'com\\.apple\\.security\\.application-groups.0' raw -`