MoltenVK has its own scheme for assigning a PCI device ID to the AGX GPUs. I wonder if it wouldn't be worth attempting to emulate that in case apps try to match the ID from Vulkan to this one.
Or retrieve the devices from Vulkan (as winex11) if Vulkan is available?