So I’ve posted this to addons-server github issues and have had no response, so giving this a go instead.
The gist of the issue is that when I use the API for signing an extension that already exists I get nothing but 301s. If I use no extension id and let it auto generate it works and creates a new extension.