PENDING_AUTH_TTL_MILLIS

How long a persisted pending login stays completable.

Bounded by the authorization code's own server-side lifetime (minutes in practice), with generous headroom for a slow password entry on a third-party PDS. Past this, the record is dead weight and its PKCE verifier + DPoP private key are needless exposure at rest.