Function extract_token 

fn extract_token(ctx: &Context) -> Option<String>

Extracts the raw bearer token (without the Bearer prefix) from the Authorization header.