What changed
- Refresh authentication tokens for persistent sessions.
- Wait for the current session before routing.
- Sign out unauthorized project access cleanly.
- Show a clearer loading state while a project opens.
Sign-in sessions and project loading became more reliable, especially when returning to a protected route.