Function issue_token 

pub fn issue_token(
    sub: &str,
    email: &str,
    role: &str,
    step: &str,
) -> Option<String>

Issue a signed JWT for a principal at the given MFA step (MFA_OK or MFA_PENDING). Returns None if auth isn’t configured.