pub fn generate_code_verifier() -> String
Generate a cryptographically-random code_verifier (43 chars, RFC 7636 §4.1).