Preview token expiry explained

Each create or read of a private preview signs its own token with its own tokenExpiresAt, so a list after a week-long create shows a different token that ends sooner; the token you already hold still works until its own expiry or a rotate. See private preview tokens.