Function build_mc_sa_token_secret 

pub fn build_mc_sa_token_secret(namespace: &str, sa_name: &str) -> Secret

Build the kubernetes.io/service-account-token Secret that triggers token generation.

After this Secret is applied, the Kubernetes token controller populates data.token with a long-lived bearer token for the specified service account.