How to make access token valid for management API calls?

The issue with that particular rule is that the namespace you’re trying to use is restricted; see the warning in the reference documentation for custom claims for up to date information on restrictions, but at the time this was written:

auth0.com, webtask.io and webtask.run are Auth0 domains and therefore cannot be used as a namespace identifier.

In addition, even with a valid namespace the claims will only be added if the end-user has metadata associated with it so if you say you are not seeing metadata with the console.log call then you’ll need to check if the specific user really has metadata. Another thing to have in mind is that ideally, you’ll include only the necessary pieces of information contained within metadata instead of including the whole thing.