Session & Token Management: JWT, Opaque, Refresh & RotationManage session lifecycles, token strategies, and secure token rotation