OAuth client: keep refresh_token on non-rotating refresh; restore same-origin issuer binding #2918

Job	Run time
checks / pre-commit	43s
checks / readme-snippets	12s
checks / test (3.11, locked, windows-latest)	1m 40s
checks / test (3.11, lowest-direct, ubuntu-latest)	1m 2s
checks / test (3.11, lowest-direct, windows-latest)	1m 28s
checks / test (3.14, locked, windows-latest)	2m 36s
checks / test (3.14, lowest-direct, ubuntu-latest)	54s
checks / test (3.12, lowest-direct, windows-latest)	1m 31s
checks / test (3.13, locked, ubuntu-latest)	57s
checks / test (3.13, lowest-direct, windows-latest)	1m 37s
checks / test (3.10, locked, ubuntu-latest)	1m 1s
checks / test (3.12, lowest-direct, ubuntu-latest)	1m 12s
checks / test (3.10, locked, windows-latest)	1m 38s
checks / test (3.11, locked, ubuntu-latest)	1m 0s
checks / test (3.13, locked, windows-latest)	1m 35s
checks / test (3.12, locked, ubuntu-latest)	1m 4s
checks / test (3.10, lowest-direct, ubuntu-latest)	1m 4s
checks / test (3.12, locked, windows-latest)	1m 34s
checks / test (3.10, lowest-direct, windows-latest)	1m 36s
checks / test (3.14, locked, ubuntu-latest)	1m 52s
checks / test (3.13, lowest-direct, ubuntu-latest)	1m 10s
checks / test (3.14, lowest-direct, windows-latest)	1m 21s
all-green	4s
	28m 51s

Provide feedback