Contracts docs: Auth & session persistence

[codebestia]

Write apps/web/docs/contracts-auth-session.md documenting what the frontend persists client-side for auth: JWT storage location (localStorage/cookie/memory — whichever it actually is), lib/jwt.ts's claim-parsing helpers, and how AuthContext.tsx initializes/refreshes/clears session state.

Acceptance criteria:

• Storage mechanism and location for the auth token is documented precisely
• The session initialization sequence on app load (token present vs. absent) is documented
• Logout/clear behavior is documented, including whether device-side crypto state is also cleared

[mansur-codes]

@mansur-codes has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

I would love to work on this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @mansur-codes to this issue.

[drips-wave]

Congratulations, @mansur-codes! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on July 30, 2026.

🧑‍💻 @mansur-codes: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊