0.7.2

• Fix: user_id now returns the UUID extracted from the JWT ns:u claim instead of always None — resolves the HA config flow silent unknown error.
• Fix: Token expiry is now parsed from the expiresOn ISO 8601 timestamp; the old expiresIn fallback is kept for API compatibility.
• Quality: mypy/flake8 clean, full line coverage on the new JWT decode path.
• Downstream note: bump manifest.json to lojack-api==0.7.2 after releasing.