When building a firmware image, is there a way to apply `scripts/diffconfig.sh` to the kernel's `.config`?

Sorry, but that information is not stored.
The .config is just a simple flat file about option selections, but there is no info about the reason why an option has been toggled.

That is pretty much what the normal diffconfig does for the normal .config

Personally I keep a short .config recipe, originally pruned from diffconfig.
See

Regarding kernel config, you might look into my earlier suggestion about git diff, and using is output.