Identity tokens in long-running programs

A program that runs for a long time inside a sandbox, such as a server or an agent, now keeps getting identity tokens after the sandbox's request token changes: the TypeScript SDK asks again with the sandbox's current one instead of failing with a 403. See identity tokens.