a380de37

By: Michael Lynch <git@mtlynch.io>

Replace regex validation with charset-based validation for login tokens

Remove loginTokenRe regex and replace it with a hash set derived directly
from loginTokenCharset to eliminate coupling between the charset definition
and validation logic.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Suite timing

Time to Start Worker time Duration Time to finish
Config 0s 1s 1s 1s
Eval 1s 1m03s 1m03s 1m04s
Build 3s 6m55s 1m19s 1m22s
Test - - - -
Deploy - - - -
Suite 0s 7m59s 1m22s 1m22s

Timeline

0s10s20s30s40s50s1m1m10s1m20s