pub fn token_for_block(block_id: &str, agent_token: Option<&str>) -> String
The block’s container token: minted on first use, reused on later turns, with the grant’s identity refreshed from this turn’s env.