Authorization-expiry watchdog: warn about (or act on) authorized payments nearing expiry

[loevgaard]

Card authorizations lapse after a number of days (acquirer-dependent — often 7–30). A shop that ships slowly can sit on an authorized payment until the authorization silently expires, and the eventual capture on the complete transition fails — a real revenue leak that few payment plugins handle.

Provider/PendingPaymentProvider already finds non-final Quickpay payments for the reconcile command, so the discovery half exists.

Tasks

• A report (own command or a mode of setono:sylius-quickpay:reconcile-payments) listing payments in state authorized older than a configurable threshold, with order number and age
• Optional actions per threshold: notify (log/exit code for cron mail) or auto-capture before expiry (off by default — capturing before dispatch is not allowed for every shop, which is exactly why on completion is the default capture mode)
• README section documenting acquirer expiry windows and the recommended cron cadence