Client Credentials vs Auth Code for server-side reporting

Building a background job that pulls call metrics via /api/v2/analytics/queues/summary. We’re currently using the Authorization Code flow to get user-scoped tokens, but the token refresh logic is messy. Client Credentials seems cleaner for a non-interactive service account. Does the Genesys Cloud SDK handle the token rotation automatically for Client Credentials, or do we still need to manage expiry? Looking at the genesys-cloud-platform-client docs, it’s not entirely clear.