CX as Code CLI export_architect_flows failing with 401

I can’t seem to figure out why my export script keeps hitting auth walls. Running the CLI tool to dump Architect flows.

$ genesys-cloud export architect-flows --output-dir ./flows

Getting this back immediately:

Error: 401 Unauthorized
Token expired or invalid.

I have a valid refresh token. I can use the Python SDK fine.

client = PureCloudPlatformClientV2()
client.login(username, password)
print(client.get_auth_token()) # Works

But the CLI export command ignores the GENESYS_CLOUD_ACCESS_TOKEN env var I set. I tried passing --token flag. Same 401. The docs say it uses the default config file. My ~/.genesys-cloud/config.json has the org ID and credentials.

Is there a specific flag to force token reuse? Or do I need to run genesys-cloud auth login before every export? The batch job runs unattended. I need a non-interactive way to authenticate the CLI export process.