Do not forget to set the write permissions on actions you want to write

Wild to me, but even with a Personal Access Token with the right permissions, you need to go to Actions > General and set Read and write permissions under Workflow permissions.

via.