In our experience with other validators, setting up a Permalink redirect from
/.well-known/apple-developer-merchantid-domain-association
to somewhere else where the necessary file is hosted has worked.
I suggest trying this first as it’s an easy solution.