refactor: single now_unix in hive_sh4re::wire_time

replaces 15 per-module copies (now_unix/now_secs) across hive-c0re and
hive-ag3nt; wire_time already owns the epoch-seconds convention

hive-c0re/src/audit_log.rs

@@ -21,13 +21,13 @@
 
 use std::path::Path;
 use std::sync::{Arc, Mutex, OnceLock};
-use std::time::{SystemTime, UNIX_EPOCH};
 
 use anyhow::{Context, Result};
 
 use chrono::{DateTime, Utc};
 use rusqlite::{Connection, params};
 use serde::Serialize;
+use hive_sh4re::wire_time::now_unix;
 
 /// Process-singleton handle, set once at coordinator startup. Mirrors
 /// `build_logs::GLOBAL` — lets recording sites write without threading an
@@ -148,7 +148,7 @@ impl AuditLog {
         outcome: AuditOutcome,
         detail: Option<&str>,
     ) -> Option<AuditEntry> {
-        let now = now_secs();
+        let now = now_unix();
         let conn = self.conn.lock().unwrap();
         match conn.execute(
             "INSERT INTO audit_log (ts_unix, agent, action, target, outcome, detail)
@@ -215,7 +215,7 @@ impl AuditLog {
     /// # Errors
     /// Returns an error if the `DELETE` query fails.
     pub fn vacuum(&self) -> Result<u64> {
-        let cutoff = now_secs() - KEEP_SECS;
+        let cutoff = now_unix() - KEEP_SECS;
         let conn = self.conn.lock().unwrap();
         let removed = conn.execute("DELETE FROM audit_log WHERE ts_unix < ?1", params![cutoff])?;
         Ok(u64::try_from(removed).unwrap_or(0))
@@ -259,13 +259,6 @@ fn row_to_entry(r: &rusqlite::Row) -> rusqlite::Result<AuditEntry> {
     })
 }
 
-fn now_secs() -> i64 {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .ok()
-        .and_then(|d| i64::try_from(d.as_secs()).ok())
-        .unwrap_or(0)
-}
 
 #[cfg(test)]
 mod tests {
@@ -326,7 +319,7 @@ mod tests {
             let conn = db.conn.lock().unwrap();
             conn.execute(
                 "UPDATE audit_log SET ts_unix = ?1",
-                params![now_secs() - KEEP_SECS - 60],
+                params![now_unix() - KEEP_SECS - 60],
             )
             .unwrap();
         }