How SaaSQuickStart renews expired JWT access tokens invisibly: a 30-min access token, a 7-day rotating refresh token, and concurrent requests queued behind a single refresh in client.ts.