The encoded public key is actually 65 bytes long, not 64.

This is shared code used by id/auth, id/keystore, and others. Unifying
it into its own package helps prevent drift among implementations.