fix(devai): retain partial OCR session state

[Sam123ben]

Summary

• restore each previously authorized sandbox resource independently after browser refresh
• retain a readable OCR job when an expired upload cannot be restored
• keep browser session storage limited to opaque upload/job identifiers

Verification

• npm test
• npm run lint
• npx tsc --noEmit
• npm run build -- --webpack

[Sam123ben]

Post-merge delivery note: local dashboard tests, lint, TypeScript, and production webpack build passed. GitHub-hosted checks and the main image-tag workflow could not start because the organization Actions billing/spending limit is blocked. No image was produced and the deploy marker did not advance, so Kargo correctly remains on the last verified immutable release. This is an external billing prerequisite, not a code-test failure.