isExpired(skewMs?: number): boolean
Example
if (session.isExpired()) showTapAgain();
Local clock check, for interface copy only. Core never gates a request on it: a device clock is not authoritative, and an expired token comes back as 401 session_token.invalid_or_expired.