Looks like we got it figured out. But if anyone else has this issue - here is what we did . . .
the sa-updates.openprotect.com rule-set looks like is what was causing all hits to be 0 (Hits: 0) on all incoming emails. We ran sa-update -D to download the default rule-set and restarted spamassassin and it is now scoring emails properly. We are going to discontinue running the sa-update on the openprotect.com rule-set for now.