Bounded Codex and xAI token refresh requests

We stop waiting when either response headers or the response body takes too long. The timeout is a transient failure, not proof that your connection was revoked. This does not bound encryption or database persistence, and existing refresh serialization remains in place.