Document user session timeout requirements and behaviour at the platform level

Document the desired requirements/behaviour for session timeout at the platform level.

Past ticket for reference: https://github.com/bcgov/entity/issues/25445

## Figma Wireframe
[https://www.figma.com/design/a4H3s0ebAxwv8ZniyNAt4g/STRR-Host-Registration---Redesign?node-id=1835-67169&t=3vQHTgJFjzgQJyNv-4](https://www.figma.com/design/a4H3s0ebAxwv8ZniyNAt4g/STRR-Host-Registration---Redesign?node-id=6604-38123&t=3vQHTgJFjzgQJyNv-4)

### Desired behaviour / Current STRR behaviour

- Applications "time out" after 30 min of inactivity in the application.
- A timeout countdown begins after 30 minutes keyboard, mouse, or touch inactivity
- Prior to timeout, in the application view, the user has the option to renew the session via a modal dialog
- Renewing the session resets the timeout period to a new 30 minute period
- The action to renew the session is via a button in the dialog to continue, or any keyboard, mouse or touch action, click outside. If the dialog is displayed it must be actioned.
- Session expiry modal and warning - the modal is displayed for 120 seconds. The modal contains a countdown timer displaying the time to expiry, beginning at 120 seconds.
- The state of the application is saved prior to the application being timed out.
- Timeout occurs on all application pages and view (Dashboard, Filing, etc.)

**Warning Dialog**

- When they user returns to the page after the modal is displayed, ensure screenreader reads modal first (instead of starting at top of page)
- Ensure the dialog display allows time for screenreader to completely read the dialog content and allows the user with accessibility needs time to interact with the dialog.

**Login / Logout page**

- When the application times out, the login / logout screen is displayed with an alert message.

**Log in**

- Upon login the initial log in page for the application is displayed (e.g., My Short-term Rental Registry dashboard)

**Consideration given to how long the timeout should be:**

- People with accessibility needs, users visiual, cognitive, hearing, and motor control capabilities
- User Tasks across the platform / applications including reading without scroll or other action, gathering information for long or complex forms (e.g., Transparency Registry or Short-term Rental Registry documents)
- Phone call - support, client to obtain information

**Updates**

- Handling for multiple browser tabs / windows open (log out of all open browser tabs or windows) - should be based on timeout of last active window/tab.