migrate file-access tokens onto shared OneTimeToken model (hash-at-rest)

app/public/request-access.php

@@ -171,9 +171,7 @@ try {
             if ($e->isRecipientRejected()) {
                 // SMTP server does not know this address — roll back the approval
                 // so the user can retry with a valid address.
-                $db->getPDO()->exec(
-                    "DELETE FROM file_access_tokens WHERE request_id = {$requestId}"
-                );
+                $db->deleteAccessTokensForRequest($requestId);
                 $db->getPDO()->exec(
                     "UPDATE file_access_requests
                      SET status = 'rejected', admin_notes = 'Adresse e-mail inconnue du serveur de messagerie (550)'