Use ledger time for the attestation expiry #416

Expected outcome

An attestation's expires_at is computed from ledger time, so a local clock behind the ledger no longer fails with ExpiresInPast.

Acceptance criteria

• useAttest derives expires_at from readLedgerTime() plus the freshness duration
• One test: with the wall clock behind ledger time, expires_at is still in the future