pub fn validate_token( db: &Database, raw_token: &str, ) -> Result<Option<ApiToken>>
Validate a raw token string. Returns the token record if valid and not expired.