it's probably not necessary. i confirmed the kernel provides rpi400 dtb by default.
there might still be some bugs to work out here. this produces a workable image, but with some uncertainty around that swapfile (the first attempt had /swapfile living on a tmpfs).