fix(auth): refresh token before token view

[goncalossilva]

Summary

• Make tdc auth token view use the existing refresh-capable token snapshot path for OAuth accounts
• Preserve manual-token behavior and COMMS_API_TOKEN refusal behavior
• Add regression coverage for refreshed OAuth token output and manual-token output

Test plan

• npm run type-check
• npm run lint:check
• npx vitest run src/commands/auth/auth.test.ts src/lib/auth.test.ts
• pre-push hook also ran full npm test: 42 files passed, 783 tests passed

Context

tdc auth token view previously printed the stored access token snapshot directly. For OAuth logins that token can be expired, causing scripts that call the raw Comms API to fail with 401.

This reuses the same refresh path used by normal authenticated CLI commands/status before printing.

[goncalossilva]

Closing this draft. The approach became messier than intended; we'll revisit with a simpler fix.