Making Refresh Tokens Actually Work in a FastMCP Google OAuth Server

FastMCP's OAuthProxy issues its own tokens that are references into a key-value store. Here is what that store must hold for refresh to work, and how to configure a persistent one without losing encryption.