Analytics API 403 on Segment Export via Terraform

Anyone know why the analytics API returns 403 Forbidden when triggered from a GitHub Actions runner, even though the same token works in Postman? Running provider v1.52 with these settings:

provider "genesyscloud" {
 environment_name = "au2"
 username = var.gc_user
 password = var.gc_pass
}