fix(oauth): reset rate limit earlier in refresh cycle

[sigaloid]

reset rate limit as soon as we encounter a low rate limit, rather than once we finish retrieving a new token

if this doesn't work, my next choice is a single thread owning write access to OAUTH_CLIENT that can receive a reset signal from anywhere, and keeps track of the rate limits to allow both the expiry event and the rate limit event to reset it, without causing concurrent token retrievals