It’s possible your external IP changes (because of how your IT routes packets leaving the VPN), and your Lemmy instance determines that’s suspicious (ex. if someone stole your cookies) and invalidates the session.
You might try going to a whatsmyip type website throught the day and see if it changes around the time you get logged out.
I feel like it’s a bit of a shot in the dark, but something worth checking for.