Breaking changes

refactor: remove attempt limiting, add TTL-based token cleanup

- Remove MAXIMUM_ATTEMPTS and validation attempt tracking
- Add MongoDB TTL index for automatic expired token cleanup (default 24h after expiry)
- Move expiry timestamp to document root level for TTL index compatibility
- Update README with new features and configuration options
- Add .claude/ to gitignore