/webhooks/subscriptions >> Must provide valid app token but bearer present

API
2

This suggests you authenticated with a “User Token” not a “App Token”

You need one of these, a client credentials token (aka App Access)