Function tokenize

fn tokenize(s: &str, max: usize) -> Vec<&str>

Up to max tokens. Leftover text after max is dropped, so the caller must treat len == max as “maybe more” when extra fields are illegal.