Requests a new access token for base_url.

base_url is sent verbatim, unconditionally alongside token_ttl (which goes over the wire as an explicit null when unconfigured — intake handles that deliberately). intake normalizes base_url and matches it against registered base URLs by longest path prefix.

Returns the parsed response map (token, expired_at, base_url) on success, or nil on failure.