pub fn get_timestamp_ms_safe() -> Option<u64>
Get current timestamp in milliseconds (safe version)
Returns None if system clock is broken, instead of panicking. Use this when you can gracefully handle clock failures.