Follow main's rename of the mint hold to a renewal hold

#854 renamed MintHold and its helpers to RenewalHold after this branch
was cut, so the session mint and its tests named things that no longer
exist.

Author: jeremy

internal/auth/agent_launch.go

@@ -192,7 +192,7 @@ func (m *Manager) SessionAccessToken(ctx context.Context, id, label string) (str
 	if err != nil {
 		if hold != nil {
 			lockErr := m.store.withKeyLock(ctx, credKey, func() error {
-				m.rememberMintHold(credKey, hold)
+				m.rememberRenewalHold(credKey, hold)
 				return nil
 			})
 			if lockErr != nil {

internal/auth/agent_launch_test.go

@@ -114,7 +114,7 @@ func TestSessionTokenFromAServerThatIgnoresTheSessionFailsClosed(t *testing.T) {
 			stored, loadErr := m.store.Load(key)
 			require.NoError(t, loadErr)
 			assert.Equal(t, "shared-cached", stored.AccessToken)
-			assert.Nil(t, stored.MintHold, "an unattributing server is no verdict on the credential")
+			assert.Nil(t, stored.RenewalHold, "an unattributing server is no verdict on the credential")
 		})
 	}
 }
@@ -137,7 +137,7 @@ func TestSessionTokenRefusedForItsSessionNamesItAndHoldsNothing(t *testing.T) {
 
 	stored, loadErr := m.store.Load(key)
 	require.NoError(t, loadErr)
-	assert.Nil(t, stored.MintHold)
+	assert.Nil(t, stored.RenewalHold)
 	assert.Equal(t, "shared-cached", stored.AccessToken)
 }
 
@@ -159,12 +159,12 @@ func TestSessionTokenRefusalOfTheCredentialIsHeld(t *testing.T) {
 
 	stored, loadErr := m.store.Load(key)
 	require.NoError(t, loadErr)
-	require.NotNil(t, stored.MintHold)
-	assert.Equal(t, mintHoldRefused, stored.MintHold.Kind)
+	require.NotNil(t, stored.RenewalHold)
+	assert.Equal(t, renewalHoldRefused, stored.RenewalHold.Kind)
 
 	_, err = m.SessionAccessToken(context.Background(), testSessionID, "coworker@box")
 	require.Error(t, err)
-	assert.ErrorIs(t, err, errMintHeld)
+	assert.ErrorIs(t, err, errRenewalHeld)
 	assert.Len(t, as.tokenCalls(), 1, "a held credential was presented again")
 }