v0.3.0

Sign the refresh test's directory with the cache's clock

The real TLS refresh test froze the cache clock at one second while its
peer signed the directory proof with wall time, so a second boundary
between the capture and the fetch dated the proof in the cache's future
and the fetch failed as source_unavailable. The peer now signs with the
test's clock.