Fix repeated auth prompts

Connected agents now get an honest token lifetime from memsprout, so they refresh access silently instead of getting logged out and bounced back through sign-in every hour. Reconnecting an agent you've already approved will also skip the approval screen entirely going forward, once the consent page finishes rolling out — for now it still shows the one-click approve screen every time.