see https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_mailproxy_dkim
you need to configure a admin-mail-from with a domain, that would be signed by your PMG (either listed in dkimdomains, or if that's not present listed as relay domain).
yes this is also intended (it should be...