Add request timeouts to reqwest client

[vkluna]

The reqwest::Client is built with defaults — no connect timeout, no read timeout. A stalled server will hang the download indefinitely. Configure sensible timeouts (e.g. 10s connect, 30s read) on the client builder.