Use `Bytes` instead of `String`

This begins the `-safe-string` migration in OCaml 4.02.0