pub fn decode_verify(jwt: &str, key: &JWK) -> Result<String, Error>
Extracts payload from JWT and verifies signature.