You can try disabling your current config.yaml with the PAT (changing the file name will do the work) and use the default OAuth flow to get the corresponding permissions.
Once you disable the file, a web browser page will open automatically when you execute a CLI command and it will ask you to authorize the access.
More info here:
BTW, I already reported this to Caleb, I’ll let you know the feedback.