fix: [sc-37574] Add task to scan and clean out expired authtokens

[macowie]

Story details: https://app.shortcut.com/tidelift/story/37574

First part of cleaning AuthTokens up. Toss out the expired ones so we can get to the good ones.

I wrote this as a one-off, but it's probably worth scheduling too, monthly maybe.