fix: allow /auth/me to trigger token refresh on 401

frontend/src/lib/api.ts

@@ -68,7 +68,8 @@ async function request<T>(
     credentials: 'include',
   })
 
-  if (res.status === 401 && !isRetry && !path.includes('/auth/')) {
+  const noRefreshPaths = ['/auth/login', '/auth/register', '/auth/refresh']
+  if (res.status === 401 && !isRetry && !noRefreshPaths.includes(path)) {
     try {
       const newToken = await refreshAccessToken()
       accessToken = newToken