Add two cleanup jobs scheduled hourly: 1. Upstream OAuth authorization sessions - removes sessions after 30 days 2. Orphaned upstream OAuth links - removes links after 7 days where user_id IS NULL. These are links created during upstream OAuth 2.0 login but never associated with a user