pub fn base64url_encode(input: &[u8]) -> String
Encode bytes as URL-safe unpadded base64 (RFC 4648 §5, no =).
=