Returns the refresh token from the authentication result, if available. This is intended for advanced scenarios where the caller manages its own token cache, for example when using DisableInternalCacheOptions.