Change APPNAME in the filename and the "APPNAME Widget": "Allow Work Profile Widgets for APPNAME" line in the file to the name of the app you'd like to allow Work Profile widgets for.
GitOps: Under the app_store_app entry, add the path under the configuration.path for the app.
No need to add the identifier (i.e., com.google.android.calendar for Google Calendar) to the configuration. Fleet automatically takes care of this, since the config is scoped to the app.