pub fn checked_task_deadline(seconds: u64) -> Result<Instant>
Reject unrepresentable delays instead of panicking, clamping, or executing early.