Hi @klaussner
Thanks for reaching out!
We have first released the linter check (and warning) ahead of enforcing the permissions. The enforcement itself is planned to be enabled in the coming day or so (a separate announcement will be communicated on our Forge changelog). This means that all new deployments after this date will require the permission to be added to the manifest.
If the bundled resources is not working, you will likely have to add a URL instead and add this URL to the list of permissions of your app.
As for the linter warning, we have opted to add a generic warning that gets displayed as soon as you are using a dynamic properties module. The warning cannot be fixed (via the usual lint --fix) so it will always be displayed as a reminder.
We have opted with this approach because there was too many combinations of how to define an icon property in an app code, and the linter would have not necessarily picked all those combinations.
I hope this helps.