Use crypto API to generate prefetch token (#72348)
These tokens don't need to be cryptographically secure (yet) but
eventually they will be so might as well use an actual hash function to
generate them.
(Doing this in its own step because I saw some bundler errors when I
tried this in the last PR and didn't want that to block the rest of the
change)
