v1.4.2

Fallow cleanup: drop unused peakHours exports, annotate Electron entry points (false positives), and extract shared token lifecycle (isExpired + refreshIfExpired) into tokenLifecycle.js. No behavior change; all 230 tests pass.