[FIX] Add timeouts on outbound HTTP calls outside mod_ci

[devnishantt]

Please prefix your pull request with one of the following: [FEATURE] [FIX] [IMPROVEMENT]. [FIX]

In raising this pull request, I confirm the following (please check boxes):

• I have read and understood the contributors guide.
• I have checked that another pull request for this purpose does not exist.
• I have considered, and confirmed that this submission will be valuable to others.
• I accept that this submission may not be used, and the pull request closed at the will of the maintainer.
• I give this submission freely, and claim no ownership to its content.

My familiarity with the project is as follows (check one):

• I have used the project briefly.

---

Fixes #1192

#943 added timeouts inside mod_ci/controllers.py only. Five outbound
requests calls outside that file still had no timeout, so a hung
GitHub/Mailgun connection could wedge a worker forever.

Changes

Add timeout=(3.05, 10) (connect, read) at the five sites from the issue:

1. utility.py — GitHub /meta (webhook IP allowlist)
2. mod_auth/controllers.py — OAuth token exchange
3. mod_auth/controllers.py — token validity check
4. mailer.py — Mailgun send
5. mod_upload/controllers.py — create GitHub issue

HTTP_TIMEOUT lives in utility.py for the Flask-using modules.
mailer.py uses the same tuple inline so it does not import Flask.

No extra exception handlers. mod_ci is unchanged.

Tests

• tests/test_utility.py
• tests/test_auth/test_controllers.py
• tests/test_mailer.py (2 passed locally)
• tests/test_upload/test_controllers.py

Screenshots / video

Not applicable. This is HTTP timeout kwargs, not UI.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud