Auth/session self-healing

Improved sign-in reliability: users are now automatically switched to a valid subscription instead of being force-logged-out, and Auth0 rate-limit errors are handled more gracefully.