pub fn verify_jwt(token: &str, secret: &str) -> Result<AdminClaims, String>
Verify a JWT and return its claims.