pub fn decrypt_token(stored: &str, secret: &str) -> Result<String, AuthError>
Decrypt a token with a single persistence key, passing through plaintext.
Use decrypt_token_with_config to read managed or legacy key versions.
decrypt_token_with_config