[CmxTop]

…lth probes from tracing

Closes #756 [bug] Claims module does not handle timezone differences in date comparisons:

• Introduce UTC helpers (utcNow, utcNowMs, utcPlusMs) in src/common/utils/time.utils.ts
• Route all claim-window date comparisons in ClaimsService and ClaimsWorker through the UTC helpers so comparisons against Prisma's UTC-stored policy.endTime are explicit and auditable
• Add docs/CLAIMS_TIMEZONE_HANDLING.md auditing every date usage in the claims module
• Add tests covering timezone edge cases (UTC midnight boundary, fixed-clock comparisons) in claims.service.spec.ts and time.utils.spec.ts

Closes #754 [perf] OpenTelemetry spans created for health check endpoints:

• Configure @opentelemetry/instrumentation-http with an ignoreUrls list so /api/v1/health and /health no longer generate spans
• Add parseIgnoreUrls() helper; defaults are merged with OTEL_HTTP_INSTRUMENTATION_IGNORE_URLS so built-in health probes are always excluded
• Add tests for the exclusion config in opentelemetry.spec.ts

Closes #753 [bug] Policy module does not validate oracle threshold range:t (DTO range validation for CreateProductDto/UpdateProductDto threshold)

Closes #755 [security] API key middleware does not hash stored API keys:
(hash API keys with bcrypt/argon2, store only hashes)