A notification or message is expected from PAH if the token for the 'rh-certified' repository has expired.

Currently, if the Token is expired, the repo sync fails with the below error:

Error message
 
Description      400, message='Bad Request', url=URL('https://sso.redhat.com/auth/realms/redhat-external/protocol/openid-connect/token') 

This error message is not helpful if the token is expired.

We have a nice KCS to explain this situation and suggests to re-generate the token on console.redhat.com

Expectations:

It should clearly indicate that the token has expired and request the generation of a new one.