Decode a token, or generate a signed one from an editable payload. HS256 signing runs entirely in your browser via the Web Crypto API — nothing leaves your machine.