Returns the stored token without touching the network.
Useful for UI bootstrapping (e.g. "are we logged in at all?"). Does NOT trigger a refresh even if the token is expired.
Future<Token?> peek() => _storage.read();