Client network socket disconnected before secure TLS connection was established

Describe the bug

We've been having repeated CI failures (10+ in the last few days) where the toolkit is unable to fetch the ID token.

To Reproduce

Somewhat difficult to reproduce because it only happens sporadically. I do believe we've only noticed this since we moved to larger (and faster) GitHub-hosted runners. Those seem to be more prone to experience this error but I can't say for certain.

Expected behavior

Reliable CI.

Additional context

We have originally reported this issue in a downstream action. See https://github.com/google-github-actions/auth/issues/496. The troubleshooting there revealed that it is actually an error from the toolkit. Specifically from here: https://github.com/actions/toolkit/blob/683703c1149439530dcee7b8c5dbbfeec4104368/packages/core/src/oidc-utils.ts#L46-L64

Here are some test-runs where this failure occurred:

• https://github.com/firezone/firezone/actions/runs/16012489024/job/45173012105
• https://github.com/firezone/firezone/actions/runs/15990853670/job/45103970949
• https://github.com/firezone/firezone/actions/runs/15973172990/job/45049258473
• https://github.com/firezone/firezone/actions/runs/15918683976/job/44901141278
• https://github.com/firezone/firezone/actions/runs/16071981872/job/45358818620

Start with packages/core/src/oidc-utils.ts at lines 46-64 and compare the failures reported in the linked downstream issue and CI run logs. Reproduce or characterize the intermittent TLS disconnect during ID-token fetching, then verify that CI can reliably obtain the token without this failure.