Fixes the better-sqlite3 GC abort (nodejs/node#63985) present in Node 24.19.0-24.21.x.
The refresh cookie had no Max-Age, so browsers dropped it on close while the Session stayed valid for 7 days. Set maxAge from REFRESH_TTL_MS, the same constant behind Session.expiresAt.