pub fn cloud_token(api_base: &str) -> Option<String>Expand description
Resolve the cloud bearer token for api_base.
Priority: HM_API_TOKEN env (non-empty) first, then the stored
credential keyed by (CLOUD_SERVICE, api_base). Returns None when
neither is present, so the caller can produce a clear “not logged in” error.