feat(auth): tell the user when the session expired

Every 401 from Auth or Core now goes through useSessionExpired: the login page
says the session expired and returns to the last page after login. App no
longer removes a token that only the browser clock calls expired, so a backend
401 is the one signal. A 403 on the profile now shows an error instead.

src/components/BacklogCard.jsx

@@ -12,6 +12,7 @@ import {Textarea} from '@/components/ui/textarea';
 import {cn} from '@/lib/utils';
 import {STATUS_META} from './GameStatusBadge.jsx';
 import {GAME_PRIORITIES, GAME_STATUSES, NO_PRIORITY, toBacklogRequest} from '../utils/backlog.js';
+import useSessionExpired from '../hooks/useSessionExpired.js';
 
 const NOTES_MAX = 2000;
 
@@ -25,6 +26,7 @@ const toForm = (entry) => ({
 export default function BacklogCard({game, onSaved}) {
     const {t} = useTranslation();
     const navigate = useNavigate();
+    const expireSession = useSessionExpired();
     const [saved, setSaved] = useState(() => toForm(game));
     const [form, setForm] = useState(saved);
     const [busy, setBusy] = useState(false);
@@ -46,8 +48,7 @@ export default function BacklogCard({game, onSaved}) {
                 body: JSON.stringify(toBacklogRequest(form)),
             });
             if (response.status === 401) {
-                localStorage.removeItem('tbp_jwt');
-                navigate('/login');
+                expireSession();
                 return;
             }
             if (!response.ok) {