Function fetch_bearer 

fn fetch_bearer(ctx: &Context) -> Option<String>

Extracts the bearer token from the Authorization header, normalizing to a Bearer -prefixed value (mirroring APISIX’s fetch_jwt_token).