API Key Lifecycle: 30-Day TTL, Refresh Tokens, and Sliding Expiry

TermOnMac's auth model uses 128-bit API keys with 30-day sliding TTLs and 512-bit refresh tokens that rotate on use, with a 5-minute grace period for client crash recovery.