The token isn't needed anymore now that the site ownership has been verified.
In addition, the contents on ".well-known" should be deployed using the included_assets parameter, rather than a build script code snippet (which is now removed).
included_assets