fn get_bearer_token(authorization: &str) -> Option<String>
Extracts bearer token from authorization header, if any.