ci: time limits on the test, test-aarch64, package and container jobs

.gitea/workflows/gates.yml

@@ -66,6 +66,9 @@ env:
 jobs:
   test:
     runs-on: ubuntu-24.04
+    # Twice the slowest green run (4.7 min). A test that hangs instead of failing
+    # held the runner for two hours without a limit.
+    timeout-minutes: 10
 
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
@@ -88,6 +91,8 @@ jobs:
 
   test-aarch64:
     runs-on: ubuntu-24.04
+    # Twice the slowest green run (10.4 min).
+    timeout-minutes: 20
 
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
@@ -216,6 +221,8 @@ jobs:
   package:
     needs: [frontend]
     runs-on: ubuntu-24.04
+    # Twice the slowest green run (10.8 min).
+    timeout-minutes: 22
 
     # The container job needs the version and installs no Zig, so it cannot read
     # build.zig.zon the way this job does.
@@ -384,6 +391,8 @@ jobs:
   container:
     needs: [package]
     runs-on: ubuntu-24.04
+    # Twice the slowest green run (5.5 min).
+    timeout-minutes: 11
 
     env:
       # Ruling 2 and ruling 5: one parse of build.zig.zon per run, done in the