pub fn b64_encode(bytes: &[u8]) -> String
Standard base64 encode (any binary payload crossing the JSON pipe).