fix(ci): bound openssh setup apt calls

Author: skulidropek

.github/actions/setup/action.yml

@@ -24,9 +24,19 @@ runs:
     - name: Install OpenSSH client
       shell: bash
       run: |
+        if command -v ssh >/dev/null 2>&1 && command -v ssh-keygen >/dev/null 2>&1; then
+          echo "OpenSSH client is already installed; skipping apt install"
+          exit 0
+        fi
+
         for attempt in 1 2 3; do
           sudo rm -rf /var/lib/apt/lists/*
-          if sudo apt-get -o Acquire::Retries=3 -o Acquire::By-Hash=force update; then
+          if sudo timeout 120s apt-get \
+            -o Acquire::Retries=3 \
+            -o Acquire::By-Hash=force \
+            -o Acquire::http::Timeout=20 \
+            -o Acquire::https::Timeout=20 \
+            update; then
             break
           fi
           if [[ "$attempt" == "3" ]]; then
@@ -36,7 +46,11 @@ runs:
           echo "apt-get update attempt ${attempt} failed; retrying..." >&2
           sleep $((attempt * 2))
         done
-        sudo apt-get -o Acquire::Retries=3 install -y openssh-client
+        sudo timeout 120s apt-get \
+          -o Acquire::Retries=3 \
+          -o Acquire::http::Timeout=20 \
+          -o Acquire::https::Timeout=20 \
+          install -y openssh-client
     - name: Install node-gyp
       shell: bash
       run: npm install -g node-gyp