fix: metadata store lifecycle during sign-in, sign-out, and locale change (#18901)

## Summary

Fixes metadata lifecycle bugs during sign-in, sign-out, and locale
change:

- **Cross-tab sign-out**: Broadcasts sign-out via `BroadcastChannel` so
other tabs clear their session gracefully instead of hitting stale-token
errors
- **SSE teardown on sign-out**: Handles `UNAUTHENTICATED`/`FORBIDDEN`
errors in the SSE event stream effect instead of throwing unhandled
errors
- **Locale switch resilience**: `invalidateAndReload` now invalidates
collection hashes instead of clearing the store to empty, so components
never see 0 metadata items during the reload transition
- **Sign-in background mock**: Uses non-throwing
`objectMetadataItemFamilySelector` instead of hooks that throw on
missing metadata
- **View name placeholders**: Guards against `undefined` `viewName`
during metadata transitions (the minimal metadata query doesn't include
`name`)
- **Session cleanup**: Selective `localStorage` clearing
(`clearSessionLocalStorageKeys`) preserves metadata keys;
`clearAllSessionLocalStorageKeys` for full clears
- **Metadata reload API**: New `useMetadataStoreActions` hook as the
high-level API for metadata lifecycle operations (`applyMockedMetadata`,
`invalidateAndReload`, `loadMockedMetadataAtomic`)

## Test plan

- [ ] Sign out on Tab A → Tab A shows sign-in page with no console
errors
- [ ] Tab B (logged in) receives cross-tab broadcast and redirects to
sign-in
- [ ] No "Forbidden resource" SSE errors in console during sign-out
- [ ] Change language in Settings > Experience → no crash, metadata
refreshes in background
- [ ] Sign back in after sign-out → metadata loads correctly, app is
functional
- [ ] Re-sign-in after locale change → correct locale is preserved

packages/twenty-front/src/modules/auth/utils/clearAllSessionLocalStorageKeys.ts

@@ -0,0 +1,18 @@
+import { safeRemoveLocalStorageItems } from '@/auth/utils/safeRemoveLocalStorageItems';
+import {
+  ALL_METADATA_ENTITY_KEYS,
+  type MetadataEntityKey,
+} from '@/metadata-store/states/metadataStoreState';
+import { clearSessionLocalStorageKeys } from './clearSessionLocalStorageKeys';
+
+const METADATA_STORE_PREFIX = 'metadataStoreState__';
+
+const getMetadataStoreKeys = (): string[] =>
+  ALL_METADATA_ENTITY_KEYS.map(
+    (key: MetadataEntityKey) => `${METADATA_STORE_PREFIX}${key}`,
+  );
+
+export const clearAllSessionLocalStorageKeys = () => {
+  clearSessionLocalStorageKeys();
+  safeRemoveLocalStorageItems(getMetadataStoreKeys());
+};

packages/twenty-front/src/modules/auth/utils/clearSessionLocalStorageKeys.ts

@@ -0,0 +1,13 @@
+import { safeRemoveLocalStorageItems } from '@/auth/utils/safeRemoveLocalStorageItems';
+
+const SESSION_KEYS_TO_CLEAR = [
+  'lastVisitedObjectMetadataItemIdState',
+  'lastVisitedViewPerObjectMetadataItemState',
+  'playgroundApiKeyState',
+  'ai/agentChatDraftsByThreadIdState',
+  'locale',
+];
+
+export const clearSessionLocalStorageKeys = () => {
+  safeRemoveLocalStorageItems(SESSION_KEYS_TO_CLEAR);
+};

packages/twenty-front/src/modules/auth/utils/crossTabSignOut.ts

@@ -0,0 +1,41 @@
+const SIGN_OUT_CHANNEL_NAME = 'twenty-sign-out';
+
+let sharedChannel: BroadcastChannel | null = null;
+
+const getSharedSignOutChannel = (): BroadcastChannel | null => {
+  if (sharedChannel) {
+    return sharedChannel;
+  }
+
+  try {
+    sharedChannel = new BroadcastChannel(SIGN_OUT_CHANNEL_NAME);
+  } catch {
+    return null;
+  }
+
+  return sharedChannel;
+};
+
+export const broadcastSignOutToOtherTabs = () => {
+  getSharedSignOutChannel()?.postMessage({ type: 'sign-out' });
+};
+
+export const subscribeToSignOutFromOtherTabs = (
+  callback: () => void,
+): (() => void) => {
+  const channel = getSharedSignOutChannel();
+
+  if (!channel) {
+    return () => {};
+  }
+
+  channel.onmessage = (event: MessageEvent) => {
+    if (event.data?.type === 'sign-out') {
+      callback();
+    }
+  };
+
+  return () => {
+    channel.onmessage = null;
+  };
+};

packages/twenty-front/src/modules/auth/utils/safeRemoveLocalStorageItems.ts

@@ -0,0 +1,9 @@
+export const safeRemoveLocalStorageItems = (keys: string[]) => {
+  for (const key of keys) {
+    try {
+      localStorage.removeItem(key);
+    } catch {
+      // noop
+    }
+  }
+};