is there a flag or env var to enable debug logging for fleet?

Yes, you can use

--logging_debug

https://github.com/fleetdm/fleet/blob/main/docs/2-Deploying/2-Configuration.md#logging-fleet-server-logging