pub fn div_ceil(a: u64, b: u64) -> Result<u64, ProgramError>
Compute ceil(a / b) without overflow (for u64).
ceil(a / b)