Both the key and the token are handled automatically by the Kit, and you do not write a wp-activation.php yourself.
Key generation is automatic and on demand. There is no pool of keys to pre-create. When the app activates, the Kit generates the activation key server-side at that moment, from...