pub fn random(length: usize) -> String
Generate a cryptographically secure random string of given length. Uses URL-safe base64 encoding for the result.