The instant a single JustBash.exec/2 must be finished by.

at_ms is read from System.monotonic_time/1, which never jumps backwards when the wall clock is adjusted, so a deadline armed once at the top of an execution stays meaningful for its whole duration. max_wall_ms is carried alongside purely so the diagnostic can name the bound that was breached.