Clean up rotated OAuth tokens

[ejsmith]

Summary

• add scheduled cleanup for disabled OAuth tokens after the refresh replay safety window
• keep refresh-token replay detection intact by retaining spent refresh hashes until expiry plus the safety window
• page OAuth grant listing and revocation paths so large rotated-token families are handled completely

Validation

• dotnet test -- --filter-class Exceptionless.Tests.Repositories.OAuthTokenRepositoryTests
• dotnet test -- --filter-class Exceptionless.Tests.Jobs.CleanupDataJobTests
• dotnet test -- --filter-class Exceptionless.Tests.Controllers.OAuthControllerTests
• dotnet test -- --filter-class Exceptionless.Tests.Controllers.UserControllerTests
• git diff --check

Breaking Changes

None.

[github-actions]

Package	Line Rate	Branch Rate	Complexity	Health
Exceptionless.AppHost	39%	40%	134	❌
Exceptionless.Core	71%	63%	8605	➖
Exceptionless.Insulation	24%	23%	203	❌
Exceptionless.Web	75%	63%	5188	➖
Summary	71% (16657 / 23526)	62% (8496 / 13596)	14130	➖