Runner registration succeeds but later reconnects fail with access denied

Initial setup appears clean, yet the service repeatedly reconnects and logs access-denied errors tied to missing view or management rights.