- Remove render-time fallback to module store (auth-session) for roles - Consolidate login/refresh/clear logic into reusable helpers - Prevent UI logout flicker on transient /auth/userinfo failures - Add test to verify module store changes don't pollute provider state Refs: review-fix-closure-2026-05-28 AuthProvider state convergence