fix(auth): Extend JWT expiry to 24h + add friendly session expiration UX
Backend:
- Extend Access Token expiry from 2h to 24h (long operations like
review/deep-research need sufficient time)
- Refresh Token remains 7 days
Frontend:
- Add sessionGuard.ts: centralized session expiration handler with
auto token refresh and friendly modal prompt
- ASL fetch client: intercept 401, try refresh, retry on success,
show friendly modal on failure (was: raw "Unauthorized" red error)
- Axios apiClient: replace alert() + bare redirect with friendly
session expired modal (covers RVW, IIT, SSA, Admin, DC, PKB)
Tested: Token expiration flow verified, friendly modal displays correctly
Made-with: Cursor
HaHafeng
b4c293788d