Presence pings now skip for non-first-party auth providers and retry once on 401

The client presence heartbeat now checks whether the auth provider is first-party before sending a pulse, skipping it otherwise. On a 401 response, it retries once after attempting a credential refresh via onUnauthorized.