When OAuth refresh dies with invalid_grant — and you only hear from support

If you ship customer OAuth (Google, Slack, Microsoft, HubSpot, Salesforce Connected Apps…), you already know the failure mode: Refresh token gets revoked, rotated, or hits idle TTL. Your background s