URL-safe IDs from crypto.getRandomValues. Default alphabet is A–Za–z0–9_- (64 symbols). Collision odds are about (n²) / (2 × 64^size) for n IDs — this is not a password manager.