Fixed authentication issue in mobile app
Tokens were being refreshed twice on app resume, logging some users out. Traced it to a race in the startup effect.
A frustrating-but-satisfying debug session. The double refresh was introduced by StrictMode double-invoking effects in dev — but the same race could happen in production on slow networks. Guarded the refresh with an in-flight promise so concurrent calls share one request.