pub fn validate_console_token(
decisions: &RuntimeDecisionState,
token: &str,
) -> boolExpand description
Validate a bearer token against the console’s trusted OIDC config AND
the email allowlist / provider policy (via enforce_console_route_access).
Returns true only if the token is valid AND the caller is authorized.