fn next_resume_nonce() -> u64
Server-side-copy nonce appended to a resume key so repeated keys on one open stay distinct.