write_credential_pool now takes token_bases, so the in-memory fake standing in for auth.json in the refresh-race tests must accept it or every persist in those tests raises TypeError inside the refresh thread. Also carries the credential-pools doc sentence describing the stale-writer boundary. Hunks taken verbatim from #120816.