Ship deterministic clock isolation in Server 2.3.12

[rmcdaniel]

Change

Adopt the published Workflow 2.0.14 clock ownership fix from durable-workflow/workflow#512. Copying per-fiber timestamps prevents deadline arithmetic or a caller-owned Carbon object from changing the deterministic clock.

Prepare Server 2.3.12 and Helm 0.1.91 through the existing source-release manifest/generator. Composer updates only Workflow; SDK/wire contracts are unchanged.

Validation

• Published Workflow source/dist identity verified at 259c32b86d132bdbac683e3bbc1de44251d45c5d.
• Published Laravel/PHP upgrade matrix passed: https://github.com/durable-workflow/workflow/actions/runs/34685988306 .
• Independent installed-package clock/deadline regression: 8 tests / 33 assertions pass on 2.0.14; the same suite has five failures on installed 2.0.13.
• Local Workflow package-authority regression and source-release synchronization checks pass. Full generator tests require PHP alongside Node and will run in normal CI; the local host-only invocation lacks PHP.
• Repository CI is pending. After merge/publication, verify exact image contents and the clock probe in the published image, plus ordinary published-runtime smoke results.

Refs durable-workflow/workflow#511. This does not publish a new SLA or performance claim.

[rmcdaniel]

Review: the dependency lock changes only Workflow 2.0.13 to published 2.0.14 at 259c32b86d132bdbac683e3bbc1de44251d45c5d. Remaining changes are generated Server/Helm release identifiers through the existing source-release manifest; no runtime, API or deployment policy code is changed. Package authority and synchronization checks pass locally; full repository-contract check now passes in GitHub, including the generator test that could not run on the PHP-less local host. Upstream published verification and independent installed-package deadline regression are green. Awaiting the ordinary Server functional/rolling/bounded-growth/chart checks before merge.

[rmcdaniel]

All source checks passed, including the bounded-growth runtime smoke, MySQL replay/query topology, MySQL/PostgreSQL predecessor-successor tests and Helm install. Merged at 4fade98; immutable tag 2.3.12 now points to that exact commit. The repository Release Action is publishing the image and matching chart. Delivery is not yet complete: published-image identity, installed clock behavior and runtime verification still follow.

[rmcdaniel]

The exact Docker Hub image is available at durableworkflow/server@sha256:1794e5d5819c38876f7f2783486dd58d430afe664b87c224eff35536bfa1ce15. OCI labels and the installed provenance both name Workflow 2.0.14 / 259c32b86d132bdbac683e3bbc1de44251d45c5d and Server source 4fade98. An independent network-disabled PHP process in that pulled image passed setter/input isolation, returned-value isolation, deadline arithmetic, microsecond and timezone checks. Repository first-run/Compose/catalog verification is still running. Sample App PR 91 now tests this published Server image alongside the new embedded package.

[rmcdaniel]

Release complete: Server 2.3.12 and Helm 0.1.91 are published. The Release Action passed exact-image verification, bare first-run readiness, source-free Compose bootstrap, catalog convergence and immutable chart verification: https://github.com/durable-workflow/server/actions/runs/34686666559 . All merged-main checks also passed. Sample App PR 91 has passed PHP/Python/Rust execution and prepared-image validation against this published image and is merged. Clock identity/provenance proof is recorded above; no unchanged SDK release was needed.