Decode and inspect JSON Web Tokens — header, payload, expiry status, and signature. 100% client-side.