Generates a JWT refresh token for the user (1-year expiry, matching the httpOnly cookie).
User id to encode in the JWT payload.
Signed JWT string.
Generates a JWT refresh token for the user (1-year expiry, matching the httpOnly cookie).