Spec Kitty

Mission Run: kernel.clock: the single door to time

Make one kernel module the sole, enforced source of wall-clock time for the whole codebase, so time is impossible to get wrong.

Today every package re-implements its own now-stamp, lower layers cannot reach the canonical helper, and enforcement is a single-package test. This mission relocates the clock into the kernel as the one door all packages import, unifies the timestamp families behind it, adds an injectable clock for deterministic tests, and bans the raw alternative repo-wide so the wrong way can no longer be written.