pub fn tail_payload(data: &[u8], body_end: usize) -> Result<&[u8], ProgramError>
Return a slice referencing just the tail payload bytes (excluding the 4-byte length prefix). Length-bounded by the u32 prefix.