Publisher verification fails with MPNAccountNotVetted although account is fully verified

Calling POST /applications/{objectId}/setVerifiedPublisher with verifiedPublisherId xxx returns
HTTP 400: "The MPN ID (xxx) you provided has not completed the vetting process."
The Entra portal shows the same as a generic "temporary problem" message.

Current state:
- Partner Global ID xxx (type PartnerGlobal), Germany. Location ID xxx is not used.
- Partner Center Verification Summary: Overall Verified. Contact, Identity and Business verification
  all Verified since 27 Sept 2026. Legal business profile: Authorized. Program status: Active.
- Identity verification completed with government ID via Microsoft Authenticator and Verified ID
  presented via QR code.
- Agreements: no pending actions.
- Entra tenant xxx is listed under Partner Center tenant management.
- The primary contact's email domain and the app's publisher domain are both DNS-verified custom
  domains in that tenant.
- Signed-in user has Global Administrator in Entra and in Partner Center, MFA completed in session.
- Graph request IDs:xxx (2026-09-30 07:44 UTC) and
  xxx (2026-09-30 09:08 UTC).
- The Partner Center Action Center still shows a stale "Complete identity verification"
  recommendation whose link points to partner.microsoft-ppe.com and returns "forbidden".

All documented prerequisites for publisher verification are met. The vetting status does not appear
to be synced to the Entra publisher verification service. Please check Partner Global ID xxx
and sync or correct its vetting status, or tell us which check is still considered incomplete.