Your redirect URIs shouldn't be the sheets.googleapis.com callback, it should be the retool one you can see when setting up an REST API resource in Retool. So you should be using this: https://oauth.retool.com/oauth/user/oauthcallback
Your Authorized JavaScript origins should be your: https://{org_name_here}.retool.com