All scopes are configured as required by the docs.
/discourse watch private-category works from the private channel. I can see the rule get created in Discourse.
When I try to send a test message from Discourse with an ID of a topic in the private category, I get the 422.
chat integration discourse username is system