Function classify_refresh_failure 

pub fn classify_refresh_failure(status: u16, body: &[u8]) -> RefreshFailure

Classify a failed refresh.

Only 400 + invalid_grant invalidates. Deleting on a network blip or a 5xx would log people out for a server hiccup; treating a genuinely dead grant as transient means retrying forever and never prompting a re-login.