eventual.flushEventualQueue: make it pass-through its argument
eventsource: make shutdown more robust
Retrieval: test+fix

* retrieval uses a separate pubkey than delivery
* retrieval uses a different token (RT) than delivert (TT)
* URLs use urlsafe_base64 encoding, bodies are binary