Active Sessions

Live authenticated sessions with refresh-token rotation tracking. Revoke individual sessions, sign out everywhere, or invalidate a family when token reuse is detected.