ci: raise golangci-lint to 30m, job ceiling to 60m for cold runner headroom (mc#1099)

.gitea/workflows/ci.yml

@@ -146,11 +146,11 @@ jobs:
     # Flip confirmed by CI / Platform (Go) status = success on main HEAD 363905d3.
     continue-on-error: false
     # Job-level ceiling. The go test step below runs with a per-step 40m timeout;
-    # this cap catches any step that leaks past that. Set well above 40m so
-    # the per-step timeout is the active constraint. Raised to 50m
-    # to account for golangci-lint ~10m on cold runner (--no-config) plus
-    # test suite ~16-20m on cold runner (mc#1099).
-    timeout-minutes: 50
+    # this cap catches any step that leaks past that. Set to 60m to account
+    # for golangci-lint ~15-20m on cold runner (--no-config, all default linters,
+    # plus 5-10m of pre-lint setup) plus test suite ~16-20m on cold runner
+    # = ~31-40m total (mc#1099).
+    timeout-minutes: 60
     defaults:
       run:
         working-directory: workspace-server
@@ -176,10 +176,11 @@ jobs:
         run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.12.2
       - if: success()
         name: Run golangci-lint
-        # mc#1099: --no-config bypasses .golangci.yaml ceiling; --timeout 20m
-        # is the active constraint (raised from 10m after observing ~18m on cold
-        # runner — the entire budget before the test step even starts).
-        run: $(go env GOPATH)/bin/golangci-lint run --no-config --timeout 20m ./...
+        # mc#1099: --no-config bypasses .golangci.yaml ceiling; --timeout 30m
+        # is the active constraint. Cold runner: fetch-depth:0 clone (5-10m) + Go
+        # toolchain (5-10m) + mod download (2-5m) + build + vet + install lint
+        # (5m) = ~15-20m before linting even starts. 30m gives headroom.
+        run: $(go env GOPATH)/bin/golangci-lint run --no-config --timeout 30m ./...
       - if: success()
         name: Diagnostic — per-package verbose 600s
         run: |