fix/123-refresh-cookie-max-age
develop
Fixes the better-sqlite3 GC abort (nodejs/node#63985) in Node 24.19.0-24.21.x. Keeps all repositories on the same Node version.
The refresh cookie had no Max-Age, so browsers dropped it on close while the Session stayed valid for 7 days. Set maxAge from REFRESH_TTL_MS, the same constant behind Session.expiresAt.