Helper to force-refresh a token if it's near expiry in the next N minutes.
(ctx context.Context, ts oauth2.TokenSource, nearMinutes int)
source not stored for this graph (policy: none)
nothing calls this directly
no test coverage detected