Function encrypt_token 

pub fn encrypt_token(plaintext: &str, secret: &str) -> Result<String, AuthError>

Encrypt a plaintext string with a single persistence key.

Returns hexadecimal nonce/ciphertext. Use encrypt_token_with_config to write a managed key version.

Errors

Returns an error if token encryption fails.