pub fn generate_code_verifier() -> String
Generate a cryptographically random code verifier (43-128 chars, base64url).