Requires server update permission; refreshing another user's personal credential also requires server delete permission. Refresh the credential now in Manufact Cloud ("Retry now"); single-flight with every other refresher of the same grant. A healthy credential whose token is still valid is returned as it is, without contacting the authorization server. Returns the updated summary, never a token.