Well, after going back and forth with CPI, doing a little alarm.com technical support social engineering and trial/error on my part, I got everything to work. The first thing I should note is that you do not need to do anything with the actual panel and do not need the installer code for your system.
I successfully installed Leviton Z-wave in-wall dimmer switches, GE z-wave plug-in lamp and appliance modules, Schlage Link deadbolt and lever locks in addition to the Radio Thermostats CT30 installed by CPI.
Here is a picture of the alarm.com control module, with the z-wave control button circled in red (I whited out any potentially identifying serial numbers):
To add a device, simply press and hold the button (using a smaller jewelers screwdriver helps) until the yellow light (just above the word "Busy", to the left of "Z2") blinks 4 times on, then off for about 2 seconds, then repeats. At this point, press the button or otherwise follow add instructions on your Zwave device to pair it with the module. My system's voice said "Light key nine, on" when pairing. The yellow light will remain solid for a minute or so. Wait for it to go off before adding additional devices.
To exclude/delete a device, press and hold the button until the yellow light blinks 4 times (as above), release the button, then hold it again until the pattern changes to 2 blinks, 2 seconds off, 2 blinks, etc. Press the button on your Zwave device or otherwise follow remove/exclude instructions to remove it from the alarm.com module. As above, the light will remain solid for a minute or so. Wait for it to go off before removing another device.
Once paired, the devices showed up in my alarm.com account on the web within 5 minutes or so where I could rename and control them. They also appeared within the alarm.com app on my iPhone. Easy!
Two things to note:
1) When pairing locks (such as Schlage Link) you must have the device within 3 feet of the alarm.com module. This means you must remove it from the door, bring it to the module and connect the battery to the keypad. Otherwise, it will not pair "securely" and will not work properly. The Leviton dimmers, GE plug-in modules and thermostats pair as long as they are within general Z-wave range (about 60 feet without repeaters, I believe).
2) Your dealer (CPI in my case) must enable your account for each type of alarm.com emPower device (Lights, Locks, Thermostats) so I had to call them and sweet talk them into adding Locks, as I did not originally have that capability. Alarm.com technical support refused to do it, citing policy (fair).
I hope this helps someone out there!