After session expiry the engine is torn down permanently (PermissionDenied
-> runCancel), so the extend flow can never succeed and the SSO round trip
was wasted before failing with "engine is not initialised". Route the
expired dialog's action to the trigger-login flow that rebuilds the client,
and fail RequestExtendAuthSession before opening the browser when the
engine is already gone.