OAuth Token Refresh in a Client vs a Generated, Spec-Aware Flow

OAuth failures concentrate in token storage and refresh coordination, so centralize the token, serialize refresh behind one lock, and treat the refresh token as a rotating secret.