purge
Deletes OneTimeUse credentials that were already consumed (usageCount > 0) but never finalized — e.g. when the app was killed before PresentationCredential.finalizeSession() could run. Safe to call on startup; it never touches unused credentials or RotateUse documents.
Return
the number of spent credentials deleted.