How does an enterprise bean that uses container-managed transactions obtain a JTA UserTransaction object?

It doesn't! By definition, container-managed transaction processing implies that the EJB container is responsible for transaction processing. The session bean has only limited control of transaction handling via the transaction attribute.