Fixing Intermittent Auth Failures in Chrome Manifest V3

The fix was architectural: IndexedDB as canonical auth state, read-time refresh, and serialized refresh to prevent token-rotation races in Manifest V3.