- [ ] Introduce an application setting, `granular_token_enforced_after` behind the `granular_personal_access_tokens_enforcement` feature-flag (`instance` actor) that stores a date. - [ ] Render a date-picker in the `Admin > Settings > General > Accounts and limit` to configure this value.