fn constant_time_eq(a: &str, b: &str) -> bool
Constant-time equality on ASCII strings (safe for our base64url/plain outputs).