Server-authoritative pause semantics for timed workflows
Pausing a timed workflow must be a server-authoritative transition, not a UI-only countdown change. Store the frozen remaining duration, exclude paused records from expiry workers, block every mutation path, and resume from database time plus the frozen duration. Add-time, pause…