Function constant_time_eq 

pub fn constant_time_eq(a: &[u8], b: &[u8]) -> bool

Constant-time byte comparison to avoid leaking the token via timing.

Length is compared first (and short-circuits), which leaks only the token length — standard and acceptable for a shared secret.