Calling `supabase.auth.admin.updateUserById` in custom access token hook causes sign in to fail

# Bug report - [x] I confirm this is a bug with Supabase, not with my own application. - [x] I confirm I have searched the [Docs](https://docs.supabase.com), GitHub [Discussions](https://github.com/supabase/supabase/discussions), and [Discord](https://discord.supabase.com). ## Describe the bug TL;DR in local development calling `supabase.auth.admin.updateUserById` in a custom access token hook to update the user for which the custom access token hook is currently being called causes the in progress sign in request to fail with an HTTP 400 `{"error":"server_error","error_description":"Internal Server Error"}` even though the custom auth hook returns an HTTP 200 with valid claims. Running the same user update call after the hook returns instead (e.g. by `new Promise(resolve => setTimeout(1000, resolve)).then(() => /* do the update */)`) avoids the error. This I have an internal authentication API that, similarly to Supabase's Google auth, accepts a Google issued ID token and returns a short lived access token and long lived refresh token. When a user signs in this way I store the access token in the app metadata and the refresh token in a separate DB table. In the custom auth hook I validate the access token and, if it's expired, request a new one using the refresh token - I then need to store the new access token against the user so that that it can be referenced later. Looking in the supabase auth logs I can see that the error is because the auth hook is timing out with logs like this. ``` 2024-09-04 10:16:53 {"action":"run_hook","auth_event":{"action":"login","actor_id":"5f3aafb5-cb8c-42d4-bf30-bfce25d669eb","actor_name":"Liam O'Boyle","actor_username":"61403123456","actor_via_sso":false,"log_type":"account","traits":{"provider":"google"}},"component":"api","duration":5005401,"error":"422: Failed to reach hook within maximum time of 5.000000 seconds","hook":"http://host.docker.internal:54321/functions/v1/auth-hook","level":"warning","method":"POST","msg":"Hook e…