Tokenisation over Bounded Alphabets is Hard