You appear to have got things a little mixed up in setting up sandboxed Google Play Services, it might be worth starting again.
The instructions for installing sandboxed Google Play Services: https://grapheneos.org/usage#sandboxed-google-play-installation
You should not change the permissions of GmsCompat or GmsCompatCofig. They are system apps and should be left to their default. If you have changed any system apps, I suggest you reset app preferences in the Settings > System > Reset options.
Google Play Services, Google Play Store, and Google Services Framework all need the network permission, and Google Play Services needs unrestricted battery usage for push notifications. Google Services Framework should be set to optimized (the default).
If you installed any apps before sandboxed Google Play Services which rely on Google Play Services for push notifications you might have to reinstall them to get push notifications working.