pub fn clock_manipulated(last_seen: i64, now: i64) -> bool
True if the (last_seen, now) pair indicates clock tampering (parity with Swift).