ci: upgrade checkout action to v4 and add timeouts