Release v4.38.1

Fixed

• Rendered command handlers set $context.occurred from the time Arc received the command instead of the clock at handling time, so an event and the policy that authorized it see the same time, and a fixed TimeProvider controls it in tests. A command without a receipt time is refused instead of falling back to the current time. (#238)