The key does not hold the scope this endpoint requires. The
response carries a required_scope member naming exactly what is
missing, and GET /v1/me lists what the key does hold. Scopes are
fixed when a key is issued — a company admin issues a new key with
the additional scope; they are not granted after the fact.
Switch on the code member — insufficient_scope — which is
stable. Do not parse the type URI: it points here, and where
"here" is may change.