fix(client/auth): discover AS metadata before cold-start token refresh, with issuer-binding check

fix(client/auth): discover AS metadata before cold-start token refresh, with issuer-binding check #6035