Session management per device

[geolunalg]

EPIC: Epic: Authentication & Session Management (JWT + Refresh) #2065

Overview

User Story:
As a user, I want the system to recognize my device sessions so I can manage them.

Action Items

Acceptance Criteria:

• Backend stores refresh token metadata: device name (optional), IP, user agent, created_at, last_used_at.
• Endpoint to list active sessions returns metadata (not tokens).
• Endpoint to revoke a specific session invalidates its refresh token.

Resources/Instructions

REPLACE THIS TEXT - If there is a website that has documentation that helps with this issue provide the link(s) here.