A package publish to an organization registry works from one repo and fails...

The publish step is identical, yet one repository lacks the effective package authority because the inherited token is scoped by the caller repo.