notify doctors work, audit work, new product advisory sprints

src/Policy/StellaOps.Policy.Engine/Tenancy/TenantContextMiddleware.cs

@@ -14,6 +14,7 @@ public sealed partial class TenantContextMiddleware
     private readonly RequestDelegate _next;
     private readonly TenantContextOptions _options;
     private readonly ILogger<TenantContextMiddleware> _logger;
+    private readonly TimeProvider _timeProvider;
 
     // Valid tenant/project ID pattern: alphanumeric, dashes, underscores
     [GeneratedRegex("^[a-zA-Z0-9_-]+$", RegexOptions.Compiled)]
@@ -28,11 +29,13 @@ public sealed partial class TenantContextMiddleware
     public TenantContextMiddleware(
         RequestDelegate next,
         IOptions<TenantContextOptions> options,
-        ILogger<TenantContextMiddleware> logger)
+        ILogger<TenantContextMiddleware> logger,
+        TimeProvider timeProvider)
     {
         _next = next ?? throw new ArgumentNullException(nameof(next));
         _options = options?.Value ?? new TenantContextOptions();
         _logger = logger ?? throw new ArgumentNullException(nameof(logger));
+        _timeProvider = timeProvider ?? throw new ArgumentNullException(nameof(timeProvider));
     }
 
     public async Task InvokeAsync(HttpContext context, ITenantContextAccessor tenantContextAccessor)
@@ -138,7 +141,8 @@ public sealed partial class TenantContextMiddleware
             tenantHeader,
             string.IsNullOrWhiteSpace(projectHeader) ? null : projectHeader,
             canWrite,
-            actorId);
+            actorId,
+            _timeProvider);
 
         _logger.LogDebug(
             "Tenant context established: tenant={TenantId}, project={ProjectId}, canWrite={CanWrite}, actor={ActorId}",