Stub until the backend service-account entity lands (D7/D18).
Drop cached state and obtain a fresh token (after an unexpected 401).
Returns a valid bearer token, refreshing if expired.
Stub until the backend service-account entity lands (D7/D18).