Package clock supplies injectable application time. Lifecycle safety deadlines
use real context deadlines and are intentionally independent of frozen clocks.
Clock returns the current application time. Consumers pass it explicitly to
operations needing deterministic time rather than replacing process globals.