feat(auth): 登录态改为滑动续期（后台 24h/7d，打手 7d/30d）

apps/backend/src/routes/admin/auth.ts

@@ -110,7 +110,7 @@ router.post(
 
 router.get(
   '/auth/session',
-  createJsonHandler((req) => getAdminSessionSummary(extractBearerToken(req)), {
+  createJsonHandler((req, res) => getAdminSessionSummary(extractBearerToken(req), res), {
     successMessage: 'ok',
     errorMessage: '读取后台登录态失败',
     scope: '[admin/auth/session]',

apps/backend/src/routes/admin/session.ts

@@ -5,6 +5,7 @@ import {
 } from '../../services/admin/admin-auth-service.js'
 import { writeAdminAuditLog } from '../../services/admin/admin-audit-service.js'
 import { buildSuccessPayload, createHttpError, sendRouteError } from '../../utils/http.js'
+import { setSessionExpiryHeaders } from '../../utils/session-headers.js'
 import { logWarn } from '../../utils/logger.js'
 import type { AdminSession } from '../../services/admin/admin-auth-service.js'
 
@@ -63,6 +64,7 @@ export async function requireAdminSession(
 ): Promise<void> {
   try {
     req.adminSession = await verifyAdminSessionToken(extractBearerToken(req))
+    setSessionExpiryHeaders(res, req.adminSession)
     next()
   } catch (error) {
     sendRouteError(res, error, '后台鉴权失败', '[admin/auth]')