Add a bit of lag to the JWT renewal time.

[mitchell-as]

DX-3151 `state checkout` with expired JWT gives unhelpful error message

It was possible to land within the interval between actual expired time and expected expired time.

I did my best to try and reproduce this, but I wasn't able to. I genuinely think I landed in the brief window of time where the JWT expired on the Platform, but state-svc or state tool thought it was still valid. Reducing the time state-svc or state tool think it's valid should avoid this. Either way, it's not something our users will run into on a regular basis (and waiting a minute or two for the state-svc poller to refresh would have silently fixed this error).

[Naatan]

This is effectively duplicating the logic here:

cli/pkg/platform/authentication/auth.go

Line 151 in 8e47470

if s.cutoffReached(time.Now()) {

Suggest instead lowering the lifetime to say 50 minutes:

cli/pkg/platform/authentication/auth.go

Line 41 in 8e47470

const jwtLifetime = (1 * time.Hour) - (1 * time.Minute)