Secure wallet auth refresh flows and stale-session recovery

[grantfox-oss]

Strengthen wallet login, nonce handling, and refresh-token rotation so replay attacks, stale sessions, and partial failures cannot leave inconsistent auth state.

• Affected files: app/backend/src/auth/auth.module.ts, app/backend/src/auth/guards/, app/backend/src/auth/decorators/, app/backend/src/auth/index.ts, app/backend/src/common/middleware/correlation-id.middleware.ts, app/backend/src/audit/audit.service.ts, app/backend/src/config/env.schema.ts, app/backend/src/metrics/metrics.service.ts
• Acceptance criteria:
  • Refresh tokens rotate on each use and revoke on logout or suspicious reuse.
  • Nonce and wallet-binding failures preserve consistent session state and are surfaced with explicit code paths.
  • Auth events emit structured audit metadata and are covered by integration tests.

[Cybermaxi7]

Hi Maintainers, can i handle this issue

[grantfox-oss]

🦊 GrantFox — @Cybermaxi7 has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #549)
2. Your PR will be reviewed by the BlockDash-Studios maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Third Campaign campaign!

@Cybermaxi7's PR #557 was approved and merged by @MaryammAli.

🏆 @Cybermaxi7: You earned 40 FoxPoints for this contribution! Your current tier: Builder (1,585 total points). Track your full progress on GrantFox.

👏 Great work, @Cybermaxi7! Keep contributing to BlockDash-Studios.