Authorize Box Custom App (CCG) for enterprise — token request rejected with unauthorized_client

Hi Box team,
I've built a server-side integration that pulls report files from Box folders into an internal TPM dashboard. The app is created and configured, but every token request is refused because the app has not been authorized for our enterprise. I can't clear this myself — it needs a co-admin action in the Admin Console.
What I'm asking for
1. Authorize this Custom App by Client ID in Admin Console → Apps → Custom Apps Manager → Add App:
   - Client ID: 3hmb65ju4kleaytjogzilts6d6azr6tt
   - App type: Custom App, Server Authentication (Client Credentials Grant)
   - Access level: App Access Only (service account)
   - Scopes needed: read-only — read files and folders. Please do not grant write scope.
2. Confirm the Enterprise ID I'm using is correct: 1035202.
3. Confirm our policy on shared links (see question below).