Failed to find zone <REDACTED>.xyz in DNSChallenge for Let’s Encrypt Certificates

I CANNOT BELIEVE I'VE ACTUALLY MADE SUCH A GOOFY MISTAKE.

I've used

When clearly, from the LEGO Documentation, I should have passed CF_DNS_API_TOKEN :