fn fmt_mtime_ymd(mtime_secs: i64) -> String
Format a UNIX timestamp (seconds since epoch) as “YYYY-MM-DD” in UTC. Returns empty string for invalid/zero timestamps.