CI/CD token rotation failing with 401

Trying to spin up a long-lived API token for our GitHub Actions pipeline to deploy Data Actions. The POST /api/v2/oauth/token call works fine with grant_type=client_credentials, but the resulting access token expires in 30 minutes. Is there a specific scope or parameter to extend the TTL, or am I missing a refresh token flow here?

POST /api/v2/oauth/token
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials&client_id=xxx&client_secret=yyy

Getting 401 Unauthorized on subsequent steps when the token drops.