What this PR changes/adds

adds a token-lib module that contains rules and services, and leaves the extension in token-core.

Why it does that

better modularization

Further notes

• this is a breaking change, as it changes the module composition
• use token-lib if you require the rules, or services
• use token-core in a runtime/launcher

Linked Issue(s)

Closes #4389

Please be sure to take a look at the contributing guidelines and our etiquette for pull requests.