Function run_checked_timeout 

pub fn run_checked_timeout(
    cmd: &mut Command,
    log: &StageLogger,
    label: &str,
    timeout: Duration,
) -> Result<Output>

Like run_checked (no stdin; a non-zero exit becomes an Err) but bounds the child to timeout: if it has not exited within that window the whole process subtree is killed and the call returns a Retriable-wrapped timeout error. Use this for network-touching subprocesses — registry pushes, git push over ssh, gh PR submission — whose remote side can stall a connection indefinitely and would otherwise hang the entire release.