fix: use UTC-aware timestamps for cosmik card TID decoding
JavaScript's new Date() interprets ISO strings without timezone as
browser-local time. Since the server runs in UTC on Fly.io, CT users
saw cards as ~5h in the future → negative "seconds ago" on the status page.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>