Managed settings fetch can be cancelled and refreshes login only once after a 401

Claude Code fetches remote managed settings (settings an organisation sets centrally). That fetch has changed in a few ways:

• It can now be cancelled.
• After a 401 error (the server rejecting the login), Claude Code forces a refresh of the login token only once across all retries. Before, it forced a refresh on each 401 whenever a token existed and the call was not already a retry.
• If the fetch has already been cancelled, a 401 is returned as is without a refresh.
• The result of the last forced refresh is kept on the final result.

The fetch for policy limits can also be cancelled now, and keeps its own count of recovery attempts that resets on each retry.