feat(session): add session list API

- Move token-related functions from auth.go to new session.go
- Add session tracking with expiration and cleanup
- Implement session list API endpoint
- Update login/logout handlers to use session system
- Add hourly cleanup of expired tokens and sessions

README.md

@@ -59,8 +59,10 @@ For detailed API documentation, please see [docs/api.md](docs/api.md)
 ## TODO
 
 - [x] Add Windows boot service support
+- [x] Add session list API
 - [ ] Add session management API
 - [ ] Add codes per file documentation
+- [ ] Add user config modify API
 
 ## License