Invalid authentication credentials when using infra.aap_configuration.hub_collection_remote

When running infra.aap_configuration.hub_collection_remote I am getting an error
Playbook task output:

msg: 'Authentication error: Invalid authentication credentials for /api/galaxy/_ui/v1/me/
        (HTTP 401).'

aap_token is configured with a token from the admin user.
aap_hostname is configured with the gateway url

other roles from infra.aap_configuration (controller settings, inventories, etc.) authenticate just fine against the same Automation Gateway. I am using ansible automation platform 2.5 on openshift.

Installed collections:

Collection              Version     
----------------------- ------------
ansible.controller      4.6.13      
ansible.eda             2.8.0       
ansible.hub             1.0.0       
ansible.platform        2.5.20250528
awx.awx                 24.6.1      
cloud.common            4.2.0       
community.general       10.7.0      
infra.aap_configuration 3.4.1       
kubernetes.core         6.0.0 

Variables for the role

---
hub_collection_remotes:
  - name: test
    url: https://console.redhat.com/api/automation-hub/content/published/
    auth_url: https://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/token
    token: "{{ rh_token }}"
    tls_validation: false
    requirements:
      - name: ansible.platform

My playbook:

---
- name: Infra Dispatch role
  hosts: localhost
  connection: local
  gather_facts: false
  vars_files:
    - ../vaults/vault-{{ stage }}
  roles:
    - name: infra.aap_configuration.dispatch