After some debugging on IRC with guidance from minute and josch, here is my /boot/boot.scr that works on my system, where I now have the A311D module, with / on a LUKS-encrypted lvm on an NVME drive:
https://mister-muffin.de/p/ZjJp.bin
This (partially) binary file replaces /boot/boot.scr on the SD card.