My $JOB ended up giving up on GHES and migrating to GHEC because of these exact issues.