JWT inspector

Split a JWT into header and payload, flag exp/nbf/iat as expired, not yet valid or fine, and verify or re-sign HS256/384/512 with WebCrypto. Everything runs locally; the token never leaves the page.