Decode a JSON Web Token without verifying it: header, algorithm, payload claims, issued-at/expiry times and whether it has expired. Use to debug auth tokens and API sessions.