docs: update refresh token rotation description and examples

docs/swagger.yaml

@@ -59,7 +59,7 @@ definitions:
   dto.RefreshTokenRequest:
     properties:
       refresh_token:
-        example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
+        example: f94d4ddc7d9b4fcb9d3a2c44c400b780c3e1f1a5c2b7d4e6a0b1c2d3e4f5a6b7
         type: string
     required:
     - refresh_token
@@ -105,7 +105,7 @@ definitions:
   dto.RevokeTokenRequest:
     properties:
       refresh_token:
-        example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
+        example: f94d4ddc7d9b4fcb9d3a2c44c400b780c3e1f1a5c2b7d4e6a0b1c2d3e4f5a6b7
         type: string
     required:
     - refresh_token
@@ -177,7 +177,7 @@ definitions:
         example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
         type: string
       refresh_token:
-        example: f94d4ddc7d9b4fcb9d3a2c44c400b780
+        example: f94d4ddc7d9b4fcb9d3a2c44c400b780c3e1f1a5c2b7d4e6a0b1c2d3e4f5a6b7
         type: string
       user:
         $ref: '#/definitions/handlers.AuthUserSummary'
@@ -565,9 +565,8 @@ paths:
     post:
       consumes:
       - application/json
-      description: Use a refresh token to get a new access token. This endpoint allows
-        clients to obtain a new access token using a valid refresh token without requiring
-        user credentials.
+      description: Use a refresh token to get a new access token. The refresh token
+        is rotated on success, and the previous refresh token becomes invalid.
       parameters:
       - description: Refresh token data
         in: body