Make OAuth2 token lifetimes dynamic

[porcellus]

🚀 Feature

Some users may want to set token lifetimes on a token-per-token basis

Implementation details

• adding a new input to the auth/token core apis that take the token lifetimes as optional input
  • we can then use these during re-signing to override the lifetime if provided
• adding a new overrideable function that takes the same input as the token builder functions
  • we can call these at the same time as building payloads
• no DB change necessary.