Streams a CSV export directly to the response.

Expects a signed token containing:

• query_id: ID of the query to export
• repo: data repository name
• vars: variable values
• search_path: optional search path
• filename: suggested filename for download

Generates a signed token for export.

Returns a signed token valid for 300 seconds.