For posterity's sake, my issue was with the

Token Endpoint Authentication Method

setting. Somehow it was set to

None

but should've been set to

Post

Thanks for the assist @cj @auser !