🍪 Cookie-Based Sessions

✅ Default: 30 days automatic expiry
✅ Remember Me: 90 days extended session
✅ Rolling: Session refreshes with each activity
✅ Keep-Alive: Automatic 1-minute refresh pings
✅ Persistent: Survives browser restarts