Exchange refresh token for new access token.
This endpoint accepts both SDK and Developer refresh tokens and returns a new access token of the same type. Implements refresh token rotation: the old refresh token is revoked and a new one is issued.
Args: payload: Request containing the refresh token db: Database session
Returns: TokenResponse with new access token and new refresh token
Raises: 401: If the refresh token is invalid or revoked