muster release v5.34.0

The provider token refresh threshold is configurable. muster hands out the Dex token it holds for a person as is while it has more than mcp-oauth’s TokenRefreshThreshold (5 minutes) left, so a refresh by a client could return a token with minutes to live, and a long agent turn whose tool calls carry it lost every tool when it expired. aggregator.oauth.server.providerTokenRefreshThreshold (chart: muster.oauth.server.providerTokenRefreshThreshold), a Go duration of at least 1s, sets it; empty keeps 5 minutes. Keep it below Dex’s ID token lifetime, or every request refreshes at Dex.