pub fn generate_code_verifier() -> String
Generates a cryptographically random code verifier for PKCE.
Returns a 64-character URL-safe string (RFC 7636 compliant, 43-128 chars).