fn constant_time_compare(a: &str, b: &str) -> bool
Constant-time comparison to prevent timing attacks