By: Michael Lynch <git@mtlynch.io>
Move login tokens into their own package Keep magic login token parsing and generation in a dedicated subpackage, matching the shared-secret auth package structure. Update handlers, magic login email sending, sqlite storage, and tests to depend on the new login_token API directly.