Function iso_at 

pub fn iso_at(ts: i64) -> String

RFC 3339 for an arbitrary instant.

Hand-formatted rather than OffsetDateTime::format, because the workspace pins time without its formatting feature. iso_now does the same for “now”; keeping the shape identical matters because these strings sit beside last_rotated_at and friends written by that function.