validateToken
Validate a token against the expected call ID and function name. Checks the HMAC signature, expiration, function name match, and call ID match.
Parameters
callId
The expected call ID.
functionName
The expected function name.
token
The base64url-encoded token to validate.
Returns
boolean — true if the token is valid and not expired.