fn b64url_decode(s: &str) -> Option<Vec<u8>>
Decodes a base64url (RFC 4648 §5, no padding) string, tolerating any trailing = padding some encoders emit.
=