Inspect headers & payloads, tweak claims, and re-sign HS256/384/512 tokens without leaving the browser.