tokenRefreshCacheTtl
How long a completed OidcProvider.refreshToken result stays available so concurrent callers with the same refresh token reuse it.
This is a single-flight share window, not session storage. The default is one second. Duration.ZERO coalesces in-flight refreshes only and removes the completed entry immediately.