Directly Remove Credentials on 401

[n7studios]

Summary

Implements Kit/convertkit-wordpress#964 and Kit/convertkit-wordpress#966 from the main Kit Plugin:

• move token hook logic to convertkit-mm-functions.php,
• checks the result of any refresh() call, forcibly removing credentials from the Plugin's settings if the failure is a 401
• on initialization of a resource class, such as ConvertKit_MM_Resource_Tags, removes the ConvertKit_Resource_V4 init() call and loads cached resources.

All calls made to refresh() from the Plugin are made by the user:

• They are on the Settings > Kit for MemberMouse screen (either going through OAuth or loading the already authenticated screen to change some settings),

Testing

• testInvalidCredentials: Check authorization failed notice displays
• testValidCredentials: Check no authorization failed notice displays

Checklist

• I have written a test and included it in this PR
• I have run all tests and they pass
• The code passes when running the PHP CodeSniffer
• Code meets WordPress Coding Standards for PHP, HTML, CSS and JS
• Security and Sanitization requirements have been followed
• I have assigned a reviewer or two to review this PR (if you're not sure who to assign, we can do this step for you)