pub fn s256(bytes: impl AsRef<[u8]>) -> String
BASE64URL(SHA-256(bytes)), unpadded: the encoding every *_s256 value uses.
BASE64URL(SHA-256(bytes))
*_s256