fix: update README session docs

[mandarini]

Update docs

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

---

📝 Walkthrough

Summary by CodeRabbit

Documentation

• Enhanced authentication documentation with clearer comparison of three available methods, including their use cases and security boundaries
• Strengthened security guidance on token validation and proper authorization decision-making
• Improved recommendations to help developers select the right authentication approach based on specific requirements and data freshness needs

Walkthrough

This pull request updates the README.md documentation to introduce and document a new function called getClaims(). The documentation now presents three related functions—getSession(), getClaims(), and getUser()—alongside their distinct use cases and trust boundaries. getSession() retrieves unverified tokens from cookies, getClaims() validates the access token and returns verified JWT claims, and getUser() fetches the most current user data from the Auth server. The changes clarify when each function should be used and emphasize the security considerations for authorization decisions.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}