[Feature] Make the "Remember me" checkbox on sign-in actually do something

[gabrielfalcao]

pass state around so that "remember me" can be sent to the backend API when and where that seems reasonable to do so

closes #1547

[alexanmtz]

@gabrielfalcao check the backend proposal.

💡 Proposed Solution

1. Backend — accept a "remember" flag from the login request and vary the JWT's lifetime accordingly:
   • Add passReqToCallback: true to the local Passport strategy config so the verify callback can read req.body.remember.
   • Sign the JWT with jwt.sign(payload, secret, { expiresIn }), where expiresIn is short when remember is falsy (e.g. 1d) and long when truthy (e.g. 30d). Exact durations are open to discussion/maintainer input.
   • Confirm token verification (src/app/routes/secure.ts, src/utils/auth/authenticationHelpers.ts, both using jwt.verify) correctly surfaces an expired-token error as a 401 once tokens actually carry an exp claim (they currently never hit this path since no token expires).