Not as I see it - this is a generally undocumented API surface not meant to be called programmatically like this, unfortunately. Every iCloud photos sync tool does/will hit this same restriction (icloudpd, rclone, etc).

The only possible unproven alternative is adopting the one-hour token generated by Apple which goes through ADP, but assuming that even works, that defeats the purpose of the app being more than a one-shot.