Always set remember-me cookie on login

Without always_remember_me: true, the RememberMeBadge was never
activated (Symfony default requires an explicit _remember_me field
in the request). Users were logged out after PHP session expiry
(~24min) instead of the intended 48h.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

config/packages/security.yaml

@@ -24,6 +24,7 @@ security:
             remember_me:
                 secret: '%kernel.secret%'
                 lifetime: 172800
+                always_remember_me: true
                 token_provider:
                     doctrine: true