OIDC Kubeconfig dialog adds cache-clear command and suggests kubectl get pods

In the GPU clusters console, the OIDC Kubeconfig dialog Verify access step now includes a copyable cache-clear command. After a role or permissions change (new RBAC bindings or an IdP group change), clear the cached OIDC token so the next kubectl login picks up the new access.

On Together-managed OIDC clusters, the step also now suggests kubectl get pods instead of kubectl get nodes. Members on those clusters typically have namespace-scoped RBAC, so listing nodes returns 403 Forbidden even when authentication works.

See Set up OIDC authentication.