CRE::Engine::Scheduler

Scheduler is a fiber that publishes SchedulerTick events at a fixed interval. The PolicyEvaluator subscriber listens for these and runs evaluate_all, which discovers overdue credentials and publishes RotationScheduled etc.

The fiber owns its own lifecycle: start() spawns it; stop() flips a flag and the next tick's check exits cleanly.