Quick update for anyone reading this:
I've just worked out how to use curl with the Lemmy API, and sadly curl -H 'Accept: application/activity+json' "https://lemmy.world/api/v3/comment/list?limit=10&postId=290602"
does show the comments, so I had to accept that there's something wrong in my request.
Having fiddled about a bit it appears that setting the type
parameter controls whether non-local comments get included, so adding type: CommentListingType.all
solved this problem.