pub const SESSION_TTL_DAYS: i64 = 7;
How long a session is valid from creation. Absolute expiry — no per-request sliding write, so an authenticated request costs one indexed lookup and zero writes (performance).