Cloudflare Workers entry point

[aram356]

Description

New trusted-server-adapter-cloudflare crate. Entry point using #[event(fetch)] and edgezero_adapter_cloudflare::dispatch(). Construct RuntimeServices with Cloudflare-backed trait implementations. Admin key routes. CI jobs for native + wasm32-unknown-unknown targets.

std::time::Instant cleanup

auction/orchestrator.rs uses std::time::Instant for deadline tracking. This works on wasm32-wasip1 (Fastly) via WASI clock support but panics on wasm32-unknown-unknown (Cloudflare). Replace with web-time::Instant (which EdgeZero already uses) or a similar cross-platform time crate. Also audit proxy.rs for std::time::SystemTime usage. Add web-time to workspace dependencies in this PR.

Done when

• Route parity + basic-auth gate tests pass
• Admin key routes work
• Crate host-compilable (cfg-gated shims)
• Cloudflare CI jobs added (native + wasm32-unknown-unknown)
• std::time::Instant replaced with web-time::Instant in core
• Per-PR gates pass

Blocked by

PR 15

References

• docs/internal/EDGEZERO_MIGRATION.md — Phase 4, PR 17
• Part of EdgeZero migration #480