Add a UUID length sanity check when decoding base64 strings

This fixes test failures on platforms where references stringify
to 12 hex digits.

Closes: #814929