Auth hardening and session security

• Hardened authentication layer with improved session management

• Added secure token handling and rotation

• Strengthened access controls across all API endpoints

Improves the security posture of the platform ahead of beta access.