can you compare access permissions in your local vs cs author for dam-users group. 403 is related with permission only . uploaduser is created as a Service User or regular user? It is better to create as a Service User in AEM as a Cloud Service. or you can try by giving full access permission manual...

can you keep a condition for resourceType (I,e if the replication action happened only on Page) something like that? or filter the resourceType or filter based on the page path. duplicate events might be with any of the node properties also getting replicated??

can you check below thread: https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-implement-saml-authentication-in-aem/td-p/437693

in core/pom.xml

The cq:allowedTemplates property is not inherited by default in AEM. It is only applicable to the node where it is set. If you want to restrict the templates for a specific path and its descendants, you need to set the cq:allowedTemplates property on each node individually.   you can try with some c...

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/issue-working-with-acscommons-io-jsonwebtoken-acscommons-io/m-p/657845