A minted token refreshes once, then the old jti is blacklisted. Memory and Postgres blacklists take concurrent Add and IsBlacklisted calls. Co-authored-by: Cursor <cursoragent@cursor.com>
