Function refresh_credentials 

pub fn refresh_credentials(
    agent: &Agent,
    api_base: &str,
    token: &str,
    ctx: &mut RunContext,
) -> Result<(), String>

POST to /runs/{run_id}/credentials/refresh to obtain fresh STS credentials.

Updates ctx.credentials in place on success.