That’s odd - are you logged in to dev.twitter.com when you submit your URL for approval? Also, I note that the twitter:domain field is empty, I think that’s optional, but I wonder if it is stopping your product card from being fully validated.
I’m checking with the cards guys too.