pub fn generate_access_token() -> String
Generate a cryptographically strong opaque token suitable for access/refresh/auth codes.