Paste a JWT to instantly decode its header and payload — no signature verification, fully client-side.