pub fn resolve_callback_token(db_path: &str) -> Result<String>Expand description
Resolve the per-wallet callback token.
Priority: CALLBACK_TOKEN env → persisted <db>.callback-token file →
auto-generate a random 32-hex token and persist it (0600 on unix).
The token is NEVER logged.