pub(crate) fn random(bytes: usize) -> String
Random bytes (version 4 UUIDs’ randomness), as URL-safe base64 without padding.