Constant USER_CODE_LENGTH 

const USER_CODE_LENGTH: usize = 10;

user_code length. Ten base-20 characters is ~43 bits: with the always-on per-IP throttle over the grant lifetime that keeps a single source well under the RFC 8628 §5.1 brute-force ceiling, while staying short enough to type.