Temporary Access Grants

Time-limited access for contractors or temporary users.

**Requirements:**
- Expiration date on access grants
- Automatic revocation via cron
- Notification before expiry
- Full audit trail