pub fn generate_token() -> String
Generate a typed token with a random URL-safe-base64 secret. Uses the OS CSPRNG.
Panics if the OS CSPRNG is unavailable.