Decode and inspect JSON Web Tokens — header, payload, claims, and expiry. Decoding only, no verification.