Function read_local_api_token 

pub fn read_local_api_token() -> Option<String>

Read local tip bearer when present (hex only).

Rejects short leftovers (box install writes 64 hex chars). Those cause 401s against a real Status API.