feat(auth): 登录态改为滑动续期（后台 24h/7d，打手 7d/30d）

apps/backend/src/routes/admin/session.ts

@@ -5,6 +5,7 @@ import {
 } from '../../services/admin/admin-auth-service.js'
 import { writeAdminAuditLog } from '../../services/admin/admin-audit-service.js'
 import { buildSuccessPayload, createHttpError, sendRouteError } from '../../utils/http.js'
+import { setSessionExpiryHeaders } from '../../utils/session-headers.js'
 import { logWarn } from '../../utils/logger.js'
 import type { AdminSession } from '../../services/admin/admin-auth-service.js'
 
@@ -63,6 +64,7 @@ export async function requireAdminSession(
 ): Promise<void> {
   try {
     req.adminSession = await verifyAdminSessionToken(extractBearerToken(req))
+    setSessionExpiryHeaders(res, req.adminSession)
     next()
   } catch (error) {
     sendRouteError(res, error, '后台鉴权失败', '[admin/auth]')