Private Endpoint for the deployment slot is created using the same Bicep code as for the web site, aka Microsoft.Network/privateEndpoints.

The difference is only in the groupIds property of the privateLinkServiceConnections array, as it MUST be as follows:

groupIds: ['sites-${webSlot.name}']

Where webSlot is defined using Microsoft.Web/sites/slots resource.