Not sure, I’d enable api loggging in syncthing and see why it refuses the credentials.
Usually cli gets the api key from the default config location, perhaps previously you did not run using systemd, and now that you do, it uses a different config location?