pub fn random_token() -> Result<String, String>
Generate an opaque 256-bit secret from the operating system’s secure RNG. Failures are reported; there is no timestamp or deterministic fallback.