test(auth): add agent session token expiry and clock skew validation specs

[gcoinstash-cmd]

Summary

Adds unit test specifications verifying agent authentication session expiration boundaries and clock skew handling in Lilly-Protocol/lily-backend.

• Validates exact UNIX second token lifetime clamping.
• Rejects expired sessions and temporal clock-skew anomalies.

Closes agent token authentication lifecycle testing requirements.