pub fn secret_from_hex(hex: &str) -> Result<Vec<u8>, TokenError>
Decode a hex string back to secret bytes.