Function refresh_token 

pub async fn refresh_token(
    _client: &Client,
    github_token: &str,
) -> Result<OAuthCredentials, String>

Broker refresh: re-mint session from stored GitHub user token (no browser).