Add session timeout waterfall design spec

Covers per-role/dept/job-title/member session timeout with waterfall resolution, cookie expiration bug fix, and UI changes for 4 settings pages.

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.