0b519a003f
Test first: sandbox-admin-list.feature verifies createdAt, expiresAt, unauth rejection, and admin delete — three new BDD scenarios. Bug found: listAllSandboxes() native query mapping used instanceof java.sql.Timestamp, but Hibernate 6 + PostgreSQL JDBC returns LocalDateTime for timestamptz columns. toInstant() now handles Timestamp, OffsetDateTime, ZonedDateTime, LocalDateTime (UTC), Date, and any Temporal via Instant.from() fallback. UI change (admin list "Created" column, prior commit) now has test coverage at the API layer. Co-Authored-By: Mira Rehfeld <noreply@anthropic.com>