feat: refresh token rotation

[soberm]

Description of changes

This PR enables refresh token rotation by updating the TokenRefresher to use the new GetTokensFromRefreshToken API instead of InitiateAuth with the REFRESH_TOKEN_AUTH flow. The GetTokensFromRefreshToken API will also work with refresh token rotation not being enabled and issues new ID and access tokens from a valid refresh token. If refresh token rotation is enabled it will also get a new refresh token. However, when enabling refresh token rotation it is not possible to authenticate with REFRESH_TOKEN_AUTH anymore.

Issue #, if available

14396

Description of how you validated changes

Updated existing unit and E2E tests. Manually tested fetchAuthSession to check the tokens are refreshed.

Checklist

• PR description included
• yarn test passes
• Unit Tests are changed or added
• Relevant documentation is changed or added (and PR referenced)

Checklist for repo maintainers

• Verify E2E tests for existing workflows are working as expected or add E2E tests for newly added workflows
• New source file paths included in this PR have been added to CODEOWNERS, if appropriate

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.