pub(crate) fn base64(bytes: &[u8]) -> String
Base64, so the wasm can live inside the page.
Hand-rolled rather than pulled in: this crate must stay dependency-free so it keeps building for the browser, and this is twenty lines.