mutation ConsumeLoginToken($token: String!) {
  consumeLoginToken(token: $token) {
    accessToken
    expiresAt
    user {
      id
      email
      fullName
      role
    }
  }
}