bc6268bb29
## Summary - Renames `REFRESH_TOKEN_COOL_DOWN` to `REFRESH_TOKEN_REUSE_GRACE_PERIOD` — the old name was misleading and suggested a security mechanism rather than what it actually is: a grace period for concurrent refresh token use (e.g. two browser tabs refreshing simultaneously). - Makes the token revocation in `renew-token.service.ts` conditional (`revokedAt: IsNull()`), so if the token was already revoked by a concurrent request, the original `revokedAt` timestamp is preserved and the grace window stays anchored. - Updates comments and config description to clarify intent. ## Test plan - [x] Existing unit tests updated and passing (`refresh-token.service.spec.ts`, `renew-token.service.spec.ts`) - [x] Lint clean Made with [Cursor](https://cursor.com) Co-authored-by: Cursor <cursoragent@cursor.com>