api: also NUL-terminate Strings made from cstrs

I believe we can now mostly assume that all encountered String's data are
safe to pass into functions that accept C strings. That should simplify
interop with C string code.