ci: set timeouts, harden permissions, cancel builds

ci: set timeouts, harden permissions, cancel builds #420