Function refresh_tokens 

pub async fn refresh_tokens(
    refresh_token: &str,
) -> Result<CodexCredentials, CodexError>

Exchange a refresh token for a fresh credential set.

The returned credentials contain a new refresh token — the caller must persist it; the old one is invalidated by the rotation.

Errors

Same as exchange_code.