null-terminated array

Adds desugar indirection

h_ch's return type is uint, not bytes; fixed validate_test_ab accordingly, even though it worked before with the wrong union member name (probably because token is the first thing in the struct). Oh C, stay classy.

Desugaring functions are all done! But we're not ready for the CF backends yet because desugared structures still need to be stashed in the parser.