App-password expiry should follow Default token duration

## What

app-password expiry should use (or be allowed to exceed) the admin “Default token duration”, not a hardcoded ~30 minutes.

## Want

- App-password expiry should use (or be allowed to exceed) the admin “Default token duration”, not a hardcoded ~30 minutes

## Ideas this came from

- [#9507 Create app password with Default token duration expiring time like token](https://github.com/goauthentik/authentik/issues/9507) — No When a user create his App password, the default Expiring time is half hour later. Could you please make i the Default token duration later time that admin s
- [#12034 Allow to increase expiry date for app password](https://github.com/goauthentik/authentik/issues/12034) — Currently there is no way to increase default app password expiry date (30 minutes since creation), there is only option to increase expiry for token passwords.

Start by locating the app-password expiry logic and the implementation of the admin “Default token duration”; confirm where the current roughly 30-minute limit is applied. Done means app-password expiry uses, or can exceed, that configured duration, with the relevant behavior covered by tests.

Written by the indexing model from the issue text.