I'm just here to state that this process is pure madness.

All the scopes have to perfectly match between AppScript, OAuth, Marketplace SDK and each part has to be validated by a different service in that exact order. You are able to ask for a validation if a previous step is wrong though, but the validation team will just answer that something doesn't match. What doesn't match will be for you to determine.