gha-timeout-guard — catch the workflow settings nobody writes until a job hangs for six hours

A workflow job with no timeout-minutes does not fail. It hangs for six hours, holds the concurrency slot, and the PR author goes home. gha-timeout-guard is the linter that makes that configuration a review comment instead of a Friday evening.