6cb06314f5
A user-actor token could be exchanged for an env JWT that outlived it by requesting a longer expirationTime. Surface the token's exp as expiresAt and clamp the minted JWT to it. Non-UAT exchanges are unchanged.