Right. My feedback.
T94/3,5,6 are relay switched plus
T94/1,2,4 are minus
T94/87 is ignition switch plus
T94/64 permanent plus
Which seems in line with your findings. So has good power and grounds.
Next up, to verify communications. Canbus according my notes, its on plug T32, terminals 3 can low and 4 can high. Fire up the oscilloscope, just use one channel to scope each wire at a time. Set the total voltage scale to something like +/- 10V; DC coupling, probe 1x, no trigger, timescale 500 us (play with longer or shorter). Vertical resolution of this scope is bad, but it is what it is. Probe minus cable ideally needs to be on the battery minus, even if that is in the trunk. Do not use a battery charger, if this scope is AC supplied.
Make some pictures of what you see on scope and post here. Maybe a movie or two, up to you. You are looking to have something like this, this one has two channels connected at the same time. If testing is done with plug disconnected, the waveform might be a bit distorted at the rising and falling edges, due to missing 120 ohms end resistor, which lives in the .