Refresh Token

Exchange refresh token for new access token.

This endpoint accepts both SDK and Developer refresh tokens and returns a new access token of the same type. Implements refresh token rotation: the old refresh token is revoked and a new one is issued.

Args: payload: Request containing the refresh token db: Database session

Returns: TokenResponse with new access token and new refresh token

Raises: 401: If the refresh token is invalid or revoked