pub const TOKEN_RAW_LEN: usize = 24;
Length of the random token portion in bytes (192 bits → 32 chars URL-safe base64). Same sizing as invite tokens.