pub(super) fn decode_jwt(token: &str) -> Result<(Value, Value), ApiError>
A JWT’s header and claims, decoded but not verified.