Text ⇄ Base64URL
Encode/decode Base64URL for JWT-friendly payloads.