a380de37

By: Michael Lynch <git@mtlynch.io>

Replace regex validation with charset-based validation for login tokens

Remove loginTokenRe regex and replace it with a hash set derived directly
from loginTokenCharset to eliminate coupling between the charset definition
and validation logic.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>