More reliable OAuth token refresh

We fixed a race condition that could interrupt token refresh when multiple requests used the same connection at once. Active requests now share a single refresh operation.

No action required

This fix is deployed across all regions. Existing connections remain active and no API changes are required. Failed refresh attempts now include a more specific error code in request logs.