Function random_nonce 

fn random_nonce() -> String

A fresh nonce: 18 CSPRNG-drawn bytes, base64url. The same entropy source didbot_pds::credential’s bearer tokens draw from.