fix(idle): prevent hard logout timer reset on activity during warning

[Aman-Mittal]

What and why

Closes #

Verification

Screenshots

Checklist

• I did not hand-edit generated files under src/app/api/.
• New component or service code uses the adapter boundary in src/app/core/adapters/ instead of direct browser globals or imperative third-party APIs.
• User-facing strings use translation keys.
• I added or updated tests appropriate to this change, or explained why tests were not needed.
• UI workflow changes include suitable e2e coverage, including real-backend testing where relevant.
• Commits are signed — see Commit Signing in CONTRIBUTING.md.