So the issue ended up being that Active Directory and Authentik were using the email address [email protected] for the administrative account, and Bookstack's administrative account, named david was also associated with the email address [email protected], which was trying to sync to my Active Directory/