But it is an interesting question: What is the manufacturing tolerance? Naively I had assumed that it's much smaller than a watt-hour. But that's based on ~no knowledge :D

You can still have a specific "normal"/expected capacity, even if you're producing them +-20 mWh.

Surely the battery is over-provisioned to be able to deliver the stated spec for at least some warranty period fraction?