Silent sign-in only ran when there was no token at all. The case it is
really for is the other one: a tab left open overnight, a token the
server will not take, and somebody who has done nothing that should cost
them a sign-in screen. Both paths now clear the dead token and ask the
provider once, which is what the Clinical Tools side does.
Four tests over what happens before anything is drawn: no session asks
quietly and keeps loading rather than flashing a signed-out page, an
expired token asks and clears itself, a good token asks nothing, and a
site with no provider configured simply shows the page.
Verified live with a deliberately rubbish token: cleared, one attempt
made and marked spent, and the visitor left on the sign-in page because
the provider does not know this browser.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TqXevQJhxFrM7jJg82cgZN
249d9c20ba