Paste a JWT to instantly decode its header and payload, with optional client-side signature verification.