Function mint_node_id 

pub fn mint_node_id() -> Result<String>

Mint a fresh, unguessable 128-bit node-id (hex). Decoupled from the cert so a relay compromise leaks only a routing handle, and rotatable without reissuing certs.