single-flight
Single-flight token refresh for httpx & requests — parallel 401s trigger refresh() exactly once. Thread-safe, async-safe, fully typed.