Implements hard deletion of user/browser sessions that have been finished for more than 30 days, but only after all child sessions are cleaned up. User sessions can only be deleted when no child sessions exist, ensuring backchannel logout propagation continues to work correctly.