Auto-renew generated-app sign-in so unsaved work is kept

Generated apps mint a 24-hour JWT. When it expires, save APIs return Unauthorized or Invalid token while the editor can still look signed in and plan chrome can fall back to Free. Signing in again restores saves. Request: renew the session in the background, or clearly require sign-in while keeping unsaved form data.