HttpGateway::attested_contracts should expire unused tokens to avoid a memory leak

[sanity]

After we merge the fix-delegate-auth branch, the HttpGateway::attested_contracts HashMap doesn't currently remove old tokens which will lead to a (very slow) memory leak.

One way to do this would be to use a crate like mini-moka to replace the Arc<RwLock<HashMap>> used currently.