Don't send a auth header when fetching the versions during a token refresh

[poljar]

This closes #5816.

• Public API changes documented in changelogs (optional)

[pixlwave]

Not that my approval counts for much, but thank you! 🙏

[Hywan]

Looks good to me, thanks! It's clear and tested, all good.

[codspeed-hq]

CodSpeed Performance Report

Merging #5822 will not alter performance

_{Comparing poljar/catch-22-token-refresh (23d2b5b) with main (ee82861)}

Summary

✅ 50 untouched

[codecov]

Codecov Report

❌ Patch coverage is 88.67925% with 6 lines in your changes missing coverage. Please review.
✅ Project coverage is 88.51%. Comparing base (9fff07d) to head (23d2b5b).
⚠️ Report is 10 commits behind head on main.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
crates/matrix-sdk/src/config/request.rs	55.55%	4 Missing ⚠️
crates/matrix-sdk/src/authentication/oauth/mod.rs	94.11%	1 Missing ⚠️
crates/matrix-sdk/src/http_client/mod.rs	93.75%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5822      +/-   ##
==========================================
- Coverage   88.52%   88.51%   -0.01%     
==========================================
  Files         361      361              
  Lines      101331   101367      +36     
  Branches   101331   101367      +36     
==========================================
+ Hits        89702    89730      +28     
- Misses       7426     7434       +8     
  Partials     4203     4203              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.