ci: aovid injections, add timeouts to gh steps

Author: tomdavidson

.github/workflows/pr.yml

@@ -53,6 +53,7 @@ jobs:
     name: Audit & SCA
     needs: [ci]
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - uses: actions/checkout@v4
         with:
@@ -65,6 +66,7 @@ jobs:
     name: CodeQL
     needs: [ci]
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     permissions:
       security-events: write
     steps:
@@ -111,6 +113,7 @@ jobs:
     if: always()
     needs: [ci, audit, codeql]
     runs-on: ubuntu-latest
+    timeout-minutes: 2
     steps:
       - run: |
           if [[ "${{ needs.ci.result }}" == "failure" || \
@@ -126,6 +129,7 @@ jobs:
     if: contains(github.event.pull_request.labels.*.name, 'review-app')
     runs-on: ubuntu-latest
     needs: [ci]
+    timeout-minutes: 15
     permissions:
       deployments: write
     steps:
@@ -143,4 +147,6 @@ jobs:
 
       - name: Summary
         if: always()
-        run: echo '${{ steps.raa.outputs.summary }}' >> "$GITHUB_STEP_SUMMARY"
+        run: echo "$SUMMARY" >> "$GITHUB_STEP_SUMMARY"
+        env:
+          SUMMARY: ${{ steps.raa.outputs.summary }}