fix: replace default-allow cast unwrap with closed-by-default allowlist (timestamp + integer widening)

fix: replace default-allow cast unwrap with closed-by-default allowlist (timestamp + integer widening) #26840