fix(auth): limit auto-refresh concurrency to prevent refresh storms
TokenRecord
coreauth.Auth
TokenStore
coreauth.Store