The unique index on token_hash is what makes authentication an indexed lookup rather than a scan, so this builder is fatal on failure like EnsureAuthIndexes rather than warning like the secrets one. Registered in ScopedCollections so instance purge reaches it.