package updater: add a timeout for builds