fix(openai): auto-refresh access token on 401/403 and retry instead of surfacing raw error