- Add POST /auth/refresh endpoint for token renewal - Only set refresh token cookie when rememberMe is true - Add rememberMe field to login validator schema Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>