Atomically consume a token entry. Returns the entry if valid (first use). Returns null if the jti is unknown or was already revoked via revokeFamily. Returns false if the jti was already consumed (reuse attack signal).
Stop the background GC sweep and release the timer (e.g. in test teardown).
Revoke all tokens belonging to a family (breach response / logout-all).
Persist a newly issued refresh token entry.
Atomically consume a token entry. Returns the entry if valid (first use). Returns null if the jti is unknown or was already revoked via revokeFamily. Returns false if the jti was already consumed (reuse attack signal).