Two Dates, One Mistake: Code Expiry vs. Bonus Window