pub fn verify_token(token: &str) -> Option<Claims>
Verify a JWT and return the principal, or None if invalid/expired/unconfigured.
None