pub fn parse_bearer_token(header_value: &str) -> Option<String>
Parse a single Authorization: Bearer <token> header value, returning None for malformed or non-Bearer schemes.
Authorization: Bearer <token>
None