pub fn read_token(path: Option<&Path>) -> Result<Option<String>>
Re-read each poll so token rotation propagates; None skips auth.
None