fix: address QR review findings for token validation and clearAll reliability (refs #190)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

frontend/src/core/auth/Auth0Provider.tsx

@@ -133,10 +133,10 @@ const TokenInjector: React.FC<{ children: React.ReactNode }> = ({ children }) =>
           const { indexedDBStorage } = await import('../utils/indexeddb-storage');
           await indexedDBStorage.clearAll();
           logout({ openUrl: false });
-          return;
-        }
         }
+      } finally {
         validatingRef.current = false;
+      }
     };
 
     validateToken();

frontend/src/core/utils/indexeddb-storage.ts

@@ -170,7 +170,14 @@ class IndexedDBStorage implements StorageAdapter, Auth0Cache {
         this.memoryCache.clear();
         resolve();
       };
-      tx.onerror = () => reject(tx.error);
+      tx.onerror = () => {
+        this.memoryCache.clear();
+        reject(tx.error);
+      };
+      tx.onabort = () => {
+        this.memoryCache.clear();
+        reject(new Error('Transaction aborted'));
+      };
     });
   }