GitHub's device flow returns an 8h access token plus a ~181-day refresh
token. Persist the refresh token and rotate it under the shared credential
lock before expiry, so Copilot logins no longer lapse daily.