The token will show up in the fly.io/tokens page even if it is an app-scoped deploy token. In fact, given that the command
fly apps list --json
only seems to list 1 app, it looks like your token is indeed an app-scoped one instead of an org-scoped one, unless that builder app is the only app you have under your account.