fix: NTP syncs as soon as DHCP has a lease, random origin cookie instead of the unsynced local clock, TLS validates certificates against UTC

kernel/src/Timekeeping/Time.cpp

@@ -37,7 +37,9 @@ static int64_t DateToEpoch(int year, int month, int day, int hour, int minute, i
 
 static Timekeeping::DateTime EpochToDate(int64_t epoch) {
     Timekeeping::DateTime dt = {};
-    int64_t rem = epoch;
+    /* Before the first NTP sync on a board with no RTC the clock sits near
+       the epoch, and a negative time zone pushes local time before it. */
+    int64_t rem = epoch < 0 ? 0 : epoch;
     int year = 1970;
     while (true) {
         int64_t daysInYear = IsLeapYear(year) ? 366 : 365;