Function header_matches 

pub fn header_matches(expected: &str, provided: &str) -> bool

Whether the provided header value matches the expected token, compared in constant time. Returns false immediately on length mismatch — tokens are fixed-length, so length is not secret.