Using JWT claim data outside of an auth rule?

Yes, they are available. Although not yet documented, you can check out this excellent answer from my similar question.

You can see this by peeking at the type definitions for lambda resolvers