i think an app token might return a follower total with an empty data array, and the moderator scope probably only matters when you want the actual list. every helix call needs a bearer token, and a client credentials token stays valid until the expires_in it returns, so i'd go by that number. the batch size of 35 came from a single run, and the error string isn't documented, so i'd split batches adaptively or use a safer constant