APIKeys component renders with org; focused tab refreshes token faster

Patch Changes

• Fix the standalone <APIKeys /> component failing to render when an organization is active and user API keys are disabled but organization API keys are enabled. The component now correctly checks the user API keys setting only when no organization is active. (#9247) by @wobsoriano

• Bias proactive session token refresh ownership toward the focused browser tab and poll more often while focused in multi-tab apps. (#9215) by @nikosdouvlis

• When running in a browser context, session token requests now include a tab_state parameter (focused, visible, or hidden) so the backend can distinguish foreground from background token refreshes. The parameter is omitted in environments without a document, such as extension service workers. (#9215) by @nikosdouvlis