pub const MAX_EXPIRY_SECS: u64 = _; // 3_600u64
Hard cap on a single pair-token’s lifetime. Pair-tokens are intended for immediate use (“scan this QR with your phone, now”) — a longer window is deliberately unsupported.