pub const DEFAULT_BASE_TTL: Duration;
Default base TTL when neither the source nor the per-secret cap override it. Matches the ADR-021 §7 fallback (15 minutes).