Decode and inspect JSON Web Tokens
⚠️ Signature verification requires the secret key (not done client-side)