Token Rotation

Shrinking a Kinde agent token to 120 seconds puts revocation in the exp claim

A dev.to build runs two agents against one Convex API, one holding Kinde's default token and one rebuilding its token every two minutes. The client secret in the environment variable keeps the lifetime it always had.