Validated token-endpoint response.
The struct carries protocol output only. The application decides whether, where, and for how long to retain access, refresh, and ID tokens. In particular, this library never creates a login session or makes an authorization decision from token claims.