Harden GitHub Actions against hung jobs.

Add job timeouts and cancel-in-progress concurrency, and bump checkout to v4 so workflows cannot sit on GitHub-hosted runners until the 6h default limit.

Co-authored-by: Cursor <cursoragent@cursor.com>

.github/workflows/angular.yml

@@ -27,8 +27,9 @@ jobs:
   build-test-lint:
     if: ${{ !github.event.pull_request.draft }}
     runs-on: ubuntu-latest
+    timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 

.github/workflows/image-compression.yml

@@ -22,9 +22,10 @@ jobs:
     if: github.event.pull_request.head.repo.full_name == github.repository && !github.event.pull_request.draft
     name: calibreapp/image-actions
     runs-on: ubuntu-latest
+    timeout-minutes: 15
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Compress Images
         uses: calibreapp/image-actions@main