[FEATURE] Re-read CLAUDE_CODE_CLIENT_CERT in expiration

Preflight Checklist

• [x] I have searched existing requests and this feature hasn't been requested yet
• [x] This is a single feature request (not multiple features)

Problem Statement

Claude Code does not appear to re-read CLAUDE_CODE_CLIENT_CERT when the certificate expires (it instead tries to make a connection, getting ECONNRESET instead).

Proposed Solution

Implement functionality that re-reads CLAUDE_CODE_CLIENT_CERT (and maybe the Private Key) when connections are reset, or on an interval (like with the apiKeyHelper TTL)

Alternative Solutions

Re-starting Claude Code causes Claude Code to re-read the cert, but that doesn't work at scale.

Priority

Critical - Blocking my work

Feature Category

Other

Use Case Example

_No response_

Additional Context

_No response_