Variable SSO_SESSION_MAX_AGE_SECONDS`Const`

SSO_SESSION_MAX_AGE_SECONDS: number = ...

A tenant SSO sign-in lasts this long, then goes back through the IdP: Cognito never re-asks it on refresh, so this bounds a session the tenant has offboarded.