local_provisioning_profiles.bzl forces host execution with the action argument execution_requirements = {"no-sandbox": "1", "no-remote-exec": "1"},. This causes the action to run on host, and will therefore fail in mixed-backend RBE environments where the target is different from the host.
Simply removing this line fixes the issue for me. I suspect another option would be to set the label cfg to host, but this is currently advised against by the official bazel documentation.
Looking at the code of the python script, I don't see a reason that the script should be a host-only action. It appears to support running on both linux and mac, so I would recommend to remove the execution_requirements line.