Robot Refresh endpoint

POST /robot/refresh. Authorization: Bearer current_jwt. Body: object with jwt_token (current JWT). On 200: store new JWT from response; fire token refresh event. SDK uses JWT-only refresh (no api_key+session_id fallback).