// token is passed when the user completes the captcha // Expose callback globally if Turnstile expects it