time Lock Constraint Script
Builds the time lock constraint script for a given owner pubkey.
The constraint is a small standalone script that supplies the per-vault data needed to spend a time lock vault output. For time lock it's a single push instruction containing the owner's compressed pubkey — the value the template script's signature check ultimately validates against.
Constraint and template are two independent scripts: the template defines the spend logic and is the same for every time lock vault, while the constraint holds the per-vault pubkey and differs per owner. Only the hash160 of the constraint is committed on-chain in the locking script of every time lock vault UTXO; the constraint script bytes themselves are never published. The owner reconstructs them on demand from their seed and derivation index, and reveals them in full at spend time so the network can verify they hash to the committed value.