Function generate_token 

pub fn generate_token() -> String

Generates a fresh random admin/API token: 32 URL-safe alphanumeric characters (~190 bits). Used by cortex set-admin-token --generate. The token is a plaintext bearer credential (the lightweight scheme — see docs/archive/AAA_DESIGN.md); hashing-at-rest is a documented later step.