Guardian confirmationConsent
Link lasts 7 days
GUARDIAN_TTL_MS is seven days. After that, request a new application email from /enroll.
GUARDIAN_TTL_MS is 7 days. After expiry the parent asks the talent applicant to resubmit guardian details at /enroll so Kumir can email a new link.
The server stores a sha256 digest. Plaintext never stays in the database.