[client] reset invalid tokens

[jstriebel]

When datastore-tokens time out or user-tokens are revoked we should reset those tokens in the LRU-cache of the context. It would be great if we can catch those cases by inspecting the httpx-responses and noticing bad-authentication responses, e.g. via a response event hook on a global client (see also #466).