chore: CI workflow improvements

setup-ruby-and-dependencies:
- Remove unconditional apt-get update (only ran when not needed)
- Split vips install: cache action when cache-apt-packages=true,
  direct apt-get when false (no redundant double-install)

release.yml: add timeout-minutes: 10 (prevent hanging release)
lint.yml: add timeout-minutes: 3

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: pftg

.github/actions/setup-ruby-and-dependencies/action.yml

@@ -22,18 +22,16 @@ runs:
         bundler-cache: true
         cache-version: ${{ inputs.ruby-cache-version }}-v1
 
-    - run: sudo apt-get -qq update
-      shell: bash
-
     - name: Install and cache vips
       if: ${{ inputs.cache-apt-packages == 'true' }}
       uses: jetthoughts/cache-apt-pkgs-action@fix/upgrade-actions-cache-v5
       with:
         packages: libvips libglib2.0-0 libglib2.0-dev libwebp-dev libvips42 libpng-dev
         version: tests-v2
 
-    # fallback if cache version is outdated
-    - run: sudo apt-get -qq install libvips
+    - name: Install vips (fallback)
+      if: ${{ inputs.cache-apt-packages != 'true' }}
+      run: sudo apt-get -qq update && sudo apt-get -qq install -y libvips
       shell: bash
 
     - run: sudo sed -i 's/true/false/g' /etc/fonts/conf.d/10-yes-antialias.conf

.github/workflows/lint.yml

@@ -17,6 +17,7 @@ jobs:
   lint:
     name: Ruby & YAML
     runs-on: ubuntu-latest
+    timeout-minutes: 3
 
     steps:
       - name: Checkout code

.github/workflows/release.yml

@@ -13,6 +13,7 @@ jobs:
   release:
     name: Release v${{ github.event.inputs.version }}
     runs-on: ubuntu-latest
+    timeout-minutes: 10
 
     permissions:
       id-token: write