Function normalize_token 

pub fn normalize_token(raw: &str) -> Option<String>

Normalize a role/profile token: trim, lowercase. Returns None if empty or if the token contains whitespace / quotes / backticks / =.