feat: strengthen P0 security and operations

Tiku.Application/Auth/IAuthSessionStore.cs

@@ -25,9 +25,25 @@ public interface IAuthSessionStore
         Guid? tenantId,
         CancellationToken cancellationToken = default);
 
+    Task<AuthSessionValidationResult?> ResolveActiveSessionAsync(
+        Guid sessionId,
+        Guid userId,
+        CancellationToken cancellationToken = default);
+
     Task RevokeFamilyAsync(string refreshToken, string reason, CancellationToken cancellationToken = default);
     Task RevokeRealmAsync(Guid userId, AuthRealm realm, Guid? tenantId, string reason, CancellationToken cancellationToken = default);
     Task RevokeAllAsync(Guid userId, string reason, CancellationToken cancellationToken = default);
+
+    Task<IReadOnlyCollection<AuthSessionSummary>> ListActiveAsync(
+        Guid userId,
+        Guid currentSessionId,
+        CancellationToken cancellationToken = default);
+
+    Task RevokeOwnedFamilyAsync(
+        Guid userId,
+        Guid currentSessionId,
+        Guid sessionFamilyId,
+        CancellationToken cancellationToken = default);
 }
 
 public sealed record AuthSessionIssueRequest(