Apparently solved: it appears that our provisioning profile expired yesterday, and was re-generated without all the necessary app groups. Editing our app id to include the needed app group seems to have fixed the problem, as the next time Xcode Cloud succeeded without the "exit-code: 70" error.