Answer is much more simple than I thought -- you install the kernel-devel packages for the version of the kernel that you are using.
Looks like that's in qubes-dom0-current-testing. Seeing some strange here that looks like the update VM downloading the package but then not passing the package back to dom0. Any idea of what's going on here?
sudo qubes-dom0-update kernel-devel-4.19.56-1.pvops.qubes.x86_64
Using sys-firewall as UpdateVM to download updates for Dom0; this may take some time...
Fedora 25 - x86_64 - Updates 3.3 MB/s | 24 MB 00:07
Fedora 25 - x86_64 3.8 MB/s | 50 MB 00:13
Qubes Dom0 Repository (updates) 3.4 MB/s | 12 MB 00:03
Qubes Dom0 Repository (updates-testing) 11 MB/s | 23 MB 00:02
determining the fastest mirror (15 hosts).. done.-- B/s | 0 B --:-- ETA
Qubes Templates repository 2.3 kB/s | 12 kB 00:05
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
kernel-devel
x86_64 1000:4.19.56-1.pvops.qubes qubes-dom0-current-testing 13 M
Transaction Summary
================================================================================
Install 1 Package
Total download size: 13 M
Installed size: 52 M
DNF will only download packages for the transaction.
Downloading Packages:
kernel-devel-4.19.56-1.pvops.qubes.x86_64.rpm 3.1 MB/s | 13 MB 00:04
--------------------------------------------------------------------------------
Total 2.4 MB/s | 13 MB 00:05
Complete!
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Qubes OS Repository for Dom0 131 MB/s | 138 kB 00:00
No package kernel-devel-4.19.56-1.pvops.qubes.x86_64 available.
Error: Unable to find a match.
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐