deb [arch=amd64 signed-by=/usr/share/keyrings/kitware-archive-keyring.asc] ... was the issue. The file created by current versions of the upstream script and the instructions shown on apt.kitware.com are .gpg, not .asc.
Or in other words: apologies for the noise.