It turns out that what was needed was to generate a new Refresh Token using the OAuth Playground, per these instructions: developers.google.com/google-ads/api/docs/oauth/playground