Bi-directional Base64URL (RFC 4648) encoder & decoder for JWTs, tokens, and web URLs with padding controls.