Generates and validates opaque request IDs for authenticated cluster traffic.
Every HTTP attempt gets a fresh ID so replay protection does not conflict with an idempotent higher-level operation retry.
@spec generate() :: String.t()
@spec valid?(term()) :: boolean()