Function extract_kid_from_token 

pub fn extract_kid_from_token(token_str: &str) -> Result<KeyId, Error>

Extract key ID from a PASETO token without verifying signature.

Errors

Returns Error::Token if the token format is invalid or the footer does not contain a kid claim.