pub fn encode_est_base64(der: &[u8]) -> String
Encode DER bytes as base64 for an EST response body.
Produces standard base64 (RFC 4648 §4) with 76-character line wrapping per RFC 8951 §3.