.tokenfile is very bad and what we can do about it

[ultrabear]

The .tokenfile system was originally made to offer a cheap guard against unauthorized access to the discord token when the bot was not active, without having to set env vars manually.

Originally the design makes use of miniflip, a easy to implement (and probably easier to brute force) encryption scheme I hacked together, this was to avoid adding a cryptography dependency directly to LeXdPyK.
But as Sonnet has grown, letting LeXdPyK have a dependency that Sonnet already uses is fine, and pipenv has started to mend the state of python dependency management.

So in the future, we can and should implement an AES + [password_hash] based approach, that will seamlessly upgrade peoples tokenfiles to use the more secure method