Function decode_embedded_blob 

pub fn decode_embedded_blob(
    blob_b64: &str,
) -> Result<Vec<u8>, EmbeddedResourceError>

Decode a base64 embedded blob and enforce the size cap, WITHOUT writing anything. Lets a caller validate every prompt part up front so an invalid later part cannot leave earlier parts already materialized on disk.