Fix oauth refresh

[jpagh]

Fixes #954

Adds the following which are things that I needed that I think others would benefit from having included, but that don't change any default behaviors:

extra_auth_args (dict): Additional keyword arguments to pass to the
    OAuth authorization URL.
url_style_short (bool): If true, use the short interview URL style for
    OAuth redirect URIs. Defaults to false.

[Copilot]

Pull request overview

This PR addresses OAuth credential refresh reliability for DAOAuth by ensuring Redis-loaded credentials are reattached to storage, silently refreshed when expired and refreshable, and treated as unauthorized when expired and not refreshable. It also adds opt-in configuration knobs to customize authorization URL parameters and the redirect URL style without changing defaults.

Changes:

• Add DAOAuth options extra_auth_args (extra authorization_url() kwargs) and url_style_short (use short-style interview URLs for redirect URIs).
• Refresh expired stored credentials in DAOAuth.get_credentials() (via _get_stored_credentials(refresh=True)) and treat expired tokens as unauthorized when refresh is unavailable/fails.
• Reattach Redis storage to credentials reloaded from JSON so refreshed tokens can be persisted.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.