fix(ui): persist authentication cookie beyond current browser session - #11066

Description

• follow-up to fix(ui)!: harden UI API access #10583

Currently the browser authentication cookie is currently session-only, so after restarting the browser or pc, auto-opened UI url always fails and it require opening the token URL manually again.

I didn't intended that way, so this PR fixes the browser cookie lifetime to be longer than current session by specifying "max age". I'm not familiar with exact cookie semantics, agents dug up some references:

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie#expiresdate

If unspecified, the cookie becomes a session cookie. A session finishes when the client shuts down, after which the session cookie is removed.

Please don't delete this checklist! Before submitting the PR, please make sure you do the following:

• It's really useful if your PR references an issue where it is discussed ahead of time. If the feature is substantial or introduces breaking changes without a discussion, PR might be closed.
• Ideally, include a test that fails without this PR but passes with it.
• Please, don't make changes to pnpm-lock.yaml unless you introduce a new test example.
• Please check Allow edits by maintainers to make review process faster. Note that this option is not available for repositories that are owned by Github organizations.

Tests

• Run the tests with pnpm test:ci.

Documentation

• If you introduce new functionality, document it. You can run documentation with pnpm run docs command.

Changesets

• Changes in changelog are generated from PR name. Please, make sure that it explains your changes in an understandable manner. Please, prefix changeset messages with feat:, fix:, perf:, docs:, or chore:.