const MAX_VERIFY_ATTEMPTS: u32 = 10;Expand description
Cap on how many times one grant’s user_code may be brought to the consent
step before it self-invalidates (RFC 8628 §5.1 per-code attempt cap / §5.4
possession limit), generous enough for a page reload.