Function parse_users 

pub fn parse_users(
    list: &str,
    env: &dyn Fn(&str) -> Option<String>,
) -> Result<Vec<TokenUser>, String>

name:ENV_VAR:role entries (comma-separated) → users whose token is in ENV_VAR. Err names the first bad entry or unset variable.