fn token_path() -> Option<PathBuf>
Where the portal’s restore token lives between runs: $XDG_STATE_HOME/pixelflux, or ~/.local/state/pixelflux where that is unset or not absolute.
$XDG_STATE_HOME/pixelflux
~/.local/state/pixelflux