fix(navbar): recognize authenticated users by using credentials include in fetch

Previously, the checkUserAuth function would bail out immediately when the
provider_token cookie was not available on the docs subdomain. This meant
users who were authenticated on cloud.layer5.io were not recognized on
docs.layer5.io, particularly in browsers like Safari with strict cookie policies.

The fix adds credentials: 'include' to the fetch request so the browser sends
cloud.layer5.io's session cookies with the API call, and removes the early
bailout when the local cookie is missing.

Fixes #1112

Author: Copilot

layouts/partials/navbar.html

@@ -295,23 +295,29 @@
 
   const checkUserAuth = async () => {
     try {
-     const token = getCookieValue("provider_token");
-      if (!token || token === expiredToken) { // cookie doesn't exist or has expired (due to user logout)
-        if (isUserAuthenticated) {
-          showSignInButton();
-          isUserAuthenticated = false;
-        }
-      throw new Error("missing or expired cookie");
-    }
-      const re = await fetch(`${cloudAppUrl}/api/identity/users/profile`, {
+      const token = getCookieValue("provider_token");
+
+      if (token && token === expiredToken) {
+        throw new Error("expired cookie");
+      }
+
+      const fetchOptions = {
         method: 'GET',
-        headers: {
+        credentials: 'include',
+      };
+
+      if (token) {
+        fetchOptions.headers = {
           'Authorization': `Bearer ${token}`,
-        },
-      });
+        };
+      }
+
+      const re = await fetch(`${cloudAppUrl}/api/identity/users/profile`, fetchOptions);
 
-      if (re.status === 401) { // cookie has expired
-        expiredToken = token;
+      if (re.status === 401) {
+        if (token) {
+          expiredToken = token;
+        }
         throw new Error("unauthorized");
       }
       if (re.status !== 200) {
@@ -322,11 +328,13 @@
       updateUI(response);
 
   } catch (error) {
-    // console.error("could not set user details.", error);
     showSignInButton();
+    if (isUserAuthenticated) {
+      isUserAuthenticated = false;
+    }
   }
 };
-  function getAvatarUrl(response) {
+    function getAvatarUrl(response) {
     const avatarUrl = response?.avatarUrl;
 
     return (typeof avatarUrl === 'string' && avatarUrl.trim()) || '';