I have encountered the same issue and thought the fix would be the following, but I can't manage to add it to the manifest (I target API 36 as well).
Getting error: "Element attribution is not allowed here" no matter where I put it.
https://developer.android.com/privacy-and-security/audit-data-access#declare-attribution-tags

Maybe you will have better luck...