It puts it in resource.__metadata__.token. The idea is that ephemeral state based on the result of the action is stored in the metadata of the record that is returned. __meta__ is an Ecto compatibility thing. metadata :token describes that metadata for any system that may want to extract it in an automated fashion (something that AshGraphql supports for example).
