Expand description
Capability / authority / token expiration helpers — Rust mirror of
tools/tf-types-ts/src/core/expiration.ts. Lexicographic RFC 3339
comparison so byte-for-byte parity with TS holds when both sides use
Z-suffixed UTC timestamps.