Ugh, hokay, so…again, it turns out the problem was unclear/inaccurate documentation. Shoutout to @ramkhi for his troubleshooting pointing me in the right direction. Amazon Alexa skill integration for creating voice controlled Bubble apps
Putting the actual value of the token into the header, like so, fixed the “invalid or expired” error:
POST /version-test/api/1.0/wf/api_test HTTP/1.1
Host: howstr.bubbleapps.io
Accept: /
User-Agent: LiveCode (Win32)
Content-Type: application/json
Authorization: Bearer 1482460956475x628683180082589400
Content-Length: 3194667
Expect: 100-continue