feat: Implement cleanup of stale Telegram login states on startup

Author: suxrobGM

src/Presentation/Logistics.TelegramBot/Authentication/TelegramAuthService.cs

@@ -22,6 +22,15 @@ public async Task<string> CreateLoginStateAsync(
         TelegramChatType chatType,
         CancellationToken ct = default)
     {
+        // Remove any existing pending states for this chat
+        var staleStates = await masterUow.Repository<TelegramLoginState>()
+            .GetListAsync(s => s.ChatId == chatId && !s.IsConsumed, ct: ct);
+
+        foreach (var stale in staleStates)
+        {
+            masterUow.Repository<TelegramLoginState>().Delete(stale);
+        }
+
         var state = GenerateState();
 
         var loginState = new TelegramLoginState
@@ -37,6 +46,27 @@ public async Task<string> CreateLoginStateAsync(
         return state;
     }
 
+    /// <summary>
+    /// Removes expired and consumed login states older than the specified age.
+    /// </summary>
+    public async Task CleanupStaleStatesAsync(CancellationToken ct = default)
+    {
+        var cutoff = DateTime.UtcNow.AddHours(-1);
+        var staleStates = await masterUow.Repository<TelegramLoginState>()
+            .GetListAsync(s => s.ExpiresAt < cutoff, ct: ct);
+
+        if (staleStates.Count == 0)
+            return;
+
+        foreach (var state in staleStates)
+        {
+            masterUow.Repository<TelegramLoginState>().Delete(state);
+        }
+
+        await masterUow.SaveChangesAsync(ct);
+        logger.LogInformation("Cleaned up {Count} stale Telegram login states", staleStates.Count);
+    }
+
     /// <summary>
     /// Polls for a consumed login state. Returns the context if login is complete, null if still pending.
     /// </summary>

src/Presentation/Logistics.TelegramBot/Services/TelegramChatCacheWarmer.cs

@@ -27,6 +27,11 @@ protected override async Task ExecuteAsync(CancellationToken stoppingToken)
         try
         {
             await WarmCacheAsync(stoppingToken);
+
+            // Clean up expired login states on startup
+            using var cleanupScope = scopeFactory.CreateScope();
+            var authService = cleanupScope.ServiceProvider.GetRequiredService<TelegramAuthService>();
+            await authService.CleanupStaleStatesAsync(stoppingToken);
         }
         catch (Exception ex) when (ex is not OperationCanceledException)
         {