pub fn system_clock() -> Arc<dyn Clock> ⓘ
Borrow the lease registry’s clock by default — the routing handler uses this, tests inject their own.