AuthTokenProvider

Supplies the bearer token attached to every outgoing API request.

The implementation returns the current provider's ID/session token — including for anonymous (guest) users, who typically also hold a valid token — or null when no user is signed in, in which case no Authorization header should be sent.