Decode JWT online: inspect Header and Payload, see exp/iat times and remaining validity. Pure local decoding, nothing uploaded