Function generate_cursor_token 

pub fn generate_cursor_token() -> String

Generate an opaque 192-bit cursor token (48-char hex). Falls back to a high-entropy time/counter mix if the CSPRNG is unavailable so a fresh open never fails to mint a token (the fallback is not unguessable, but production paths reach /dev/urandom successfully).