The solution for me ended up being that I needed to give the repository "Admin" access to the package. ("Write" might have worked too, but I didn't try that.) This is in Package Settings > Manage Actions access. See this GitHub doc for more info.