⚠️ This decodes only — it does not verify signatures. Don't paste production tokens into any web tool.