When the OAuth refresh token is revoked server-side, Picard enters an infinite retry loop because the server returns invalid_request instead of invalid_grant, and the code only handled the latter.

This prevents authenticated requests (releases with user-collections, collections) from ever  completing and consumes rate limit budget indefinitely until the application is restarted.