fn invalid_dpop(refused: DpopRefusal, reason: &str) -> ApiErrorExpand description
InvalidToken for a DPoP credential, challenged in the DPoP scheme,
as RFC 9449 §7.1 asks. atproto clients refresh only on a DPoP
challenge naming invalid_token; a Bearer one is read as final.