pub fn verify_jwt( token: &str, secret: &str, now_unix: u64, ) -> Result<String, ServiceError>
Verify a JWT and return the sub (user_id) if valid.
sub