More Info: If I generate and use an API key (instead of JWT) my code works.
This raises the question, Do I need to run my program from the itch.io app for it to use the manifest and provide a JWT? (vice, running the EXE directly from the installed directory)