Naturally, I found this other topic immediately after posting 
Link a payment.addr generated with a stake.vkey to a recovery phrase
It seems to belie my assumption above:
Have I misunderstood, and the stake.vkey is actually sufficient to actually delegate on someone’s behalf? I had assumed the staking signing key (stake.skey) would be needed for this.