Vault background refresh for mcp_oauth credentials

AI Impact Summary

HashiCorp Vault-backed mcp_oauth credentials can now refresh in the background, decoupling renewal from manual rotation. This reduces the likelihood of auth failures in OAuth token issuance and lowers operational overhead for credential management. Ensure Vault policy bindings, token TTLs, and the background refresh service have appropriate permissions and throughput to cover peak authentication demand.