PrefixedByteStream
A ByteStream that serves prefix bytes first, then delegates to raw. Lets the engine peek the opening bytes of an inbound connection (to tell plaintext from MSE) and then hand them back to the chosen handler as if never consumed.