Decode a JWT token to view the header, payload, and check expiration. No secret key required for reading.