Paperless-ngx API token must be for an admin user
Paperless-ngx API tokens inherit the user's permissions. `User.objects.first()` may return a non-admin user. Always explicitly get the admin user when generating tokens for integrations.
The `consumer` user (created by the helper script) is first in the database but has `is_staff=False, is_superuser=False`. Tokens generated for it return 403 on tag/document endpoints. Use `User.objects.get(username=\"admin\")` instead.\n\nDiscovered during Paperless-GPT integration (2026-03-23).