pub fn decode_cmd_binary_payload(input: &[u8]) -> Result<&[u8], String>
Decode and validate strict QWB2-framed payload bytes.
This validates framing and payload-size limits only.